corpus.blog
41,554 blogs · 5,149,205 posts Claim your blog
Record · corpus.blog/posts/01a0b652-8cbb-7026-8e3c-fe604463f008

Proxies are complicated: RCE vulnerability in a 3 million downloads/week NPM package

httptoolkit.com · published 31 August 2021

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at httptoolkit.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
17
Words captured
2,422

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://www.npmjs.com/package/pac-resolver
npmjs.com
https://www.npmjs.com/package/pac-proxy-agent
npmjs.com
https://www.npmjs.com/package/proxy-agent
npmjs.com
https://snyk.io/vuln/SNYK-JS-PACRESOLVER-1564857
snyk.io
https://developer.mozilla.org/en-US/docs/Web/HTTP/Proxy_servers_and_tunneling/Proxy_Auto-Configuration_PAC_file
developer.mozilla.org
https://en.wikipedia.org/wiki/Web_Proxy_Auto-Discovery_Protocol
en.wikipedia.org
https://github.com/TooTallNate/node-pac-proxy-agent/pull/7
github.com
https://nodejs.org/api/http.html
nodejs.org
https://www.npmjs.com/package/degenerator
npmjs.com
https://nodejs.org/api/vm.html
nodejs.org
https://nvd.nist.gov/vuln/detail/CVE-2019-10758
nvd.nist.gov
https://www.npmjs.com/package/vm2
npmjs.com
https://en.wikipedia.org/wiki/Supply_chain_attack
en.wikipedia.org
https://medium.com/deno-the-complete-reference/sandboxing-in-deno-b3d514d88b63
medium.com
https://github.com/npm/rfcs/pull/422
github.com
https://snyk.io/
snyk.io
https://snyk.io/vulnerability-disclosure/
snyk.io
Elsewhere on httptoolkit.com (2)