PT-2026-145391

Node.js discloses proxy credentials in ERR PROXY INVALID CONFIG error messages. CVE-2026-48615 established that a proxy credential must not appear in a Node.js error message and redacted the username and password from ProxyConfig.href, but that fix missed four error paths in the same subsystem, o...