14 matches found
CVE-2026-123871
Node.js discloses proxy credentials in ERRPROXYINVALIDCONFIG error messages. CVE-2026-48615 established that a proxy credential must not appear in a Node.js error message and redacted the username and password from ProxyConfig.href, but that fix missed four error paths in the same subsystem, one ...
UBUNTU-CVE-2026-123871
Node.js discloses proxy credentials in ERRPROXYINVALIDCONFIG error messages. CVE-2026-48615 established that a proxy credential must not appear in a Node.js error message and redacted the username and password from ProxyConfig.href, but that fix missed four error paths in the same subsystem, one ...
CVE-2026-123871
Node.js discloses proxy credentials in ERRPROXYINVALIDCONFIG error messages. CVE-2026-48615 established that a proxy credential must not appear in a Node.js error message and redacted the username and password from ProxyConfig.href, but that fix missed four error paths in the same subsystem, one ...
Linux Distros Unpatched Vulnerability : CVE-2026-123871
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Node.js discloses proxy credentials in ERRPROXYINVALIDCONFIG error messages. CVE-2026-48615 established that a proxy credential must not appear in a Node.js err...
DEBIAN-CVE-2026-123871
Node.js discloses proxy credentials in ERRPROXYINVALIDCONFIG error messages. CVE-2026-48615 established that a proxy credential must not appear in a Node.js error message and redacted the username and password from ProxyConfig.href, but that fix missed four error paths in the same subsystem, one ...
ALPINE-CVE-2026-123871
Node.js discloses proxy credentials in ERRPROXYINVALIDCONFIG error messages. CVE-2026-48615 established that a proxy credential must not appear in a Node.js error message and redacted the username and password from ProxyConfig.href, but that fix missed four error paths in the same subsystem, one ...
CVE-2026-123871
Node.js discloses proxy credentials in ERRPROXYINVALIDCONFIG error messages. CVE-2026-48615 established that a proxy credential must not appear in a Node.js error message and redacted the username and password from ProxyConfig.href, but that fix missed four error paths in the same subsystem, one ...
EUVD-2026-123693
Node.js discloses proxy credentials in ERRPROXYINVALIDCONFIG error messages. CVE-2026-48615 established that a proxy credential must not appear in a Node.js error message and redacted the username and password from ProxyConfig.href, but that fix missed four error paths in the same subsystem, one ...
CVE-2026-123871
Node.js versions 26.x, 24.x, and 22.x are vulnerable to proxy credential disclosure via ERR_PROXY_INVALID_CONFIG error messages. The root cause is that certain error paths—including one within the same constructor addressed in CVE-2026-48615—fail to redact raw proxy URLs. Consequently, secrets (u...
CVE-2026-123871
Node.js discloses proxy credentials in ERRPROXYINVALIDCONFIG error messages. CVE-2026-48615 established that a proxy credential must not appear in a Node.js error message and redacted the username and password from ProxyConfig.href, but that fix missed four error paths in the same subsystem, one ...
CVE-2026-123871 Node.js is vulnerable to proxy credential disclosure via ERR_PROXY_INVALID_CONFIG error messages
Node.js discloses proxy credentials in ERRPROXYINVALIDCONFIG error messages. CVE-2026-48615 established that a proxy credential must not appear in a Node.js error message and redacted the username and password from ProxyConfig.href, but that fix missed four error paths in the same subsystem, one ...
CVE-2026-123871
Node.js discloses proxy credentials in ERRPROXYINVALIDCONFIG error messages. CVE-2026-48615 established that a proxy credential must not appear in a Node.js error message and redacted the username and password from ProxyConfig.href, but that fix missed four error paths in the same subsystem, one ...
Node.js < 22.23.5, < 24.22.3, < 26.13.1 - Generation of Error Message Containing Sensitive Information in ERR_PROXY_INVALID_CONFIG leading to Proxy Credential Disclosure
Generation of Error Message Containing Sensitive Information in ERRPROXYINVALIDCONFIG leading to Proxy Credential Disclosure vulnerability discovered by ? in WordPress npm Node.js versions 26.13.1...
CVE-2026-123871: nodejs node: Node.js discloses proxy credentials in ERR_PROXY_INVALID_CONFIG error messages
Node.js discloses proxy credentials in ERRPROXYINVALIDCONFIG error messages. CVE-2026-48615 established that a proxy credential must not appear in a Node.js error message and redacted the username and password from ProxyConfig.href, but that fix missed four error paths in the same subsystem, one ...