Lucene search
+L

396 matches found

Github Security Blog
Github Security Blog
added 2026/09/22 7:54 p.m.2 views

request-filtering-agent: Synchronous throw from createConnection() for literal private-IP hosts bypasses req.on('error'), crashing the Node.js process

Summary RequestFilteringHttpAgent / RequestFilteringHttpsAgent block requests to private IPs, but the blocking happens via a synchronous throw inside createConnection for literal private-IP hostnames e.g. 169.254.169.254, 127.0.0.1. Node.js's http.request / http.get expects createConnection to em...

7.5CVSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder