CVE-2020-25219

The CVE-2020-25219 issue affects libproxy in the 0.4.x line (up to 0.4.15). A remote HTTP PAC server can trigger uncontrolled recursion by sending a response that is an infinite stream without a newline, causing stack exhaustion. Public advisories confirm vulnerable packages include libproxy and ...

CVE-2020-26154

CVE-2020-26154 affects libproxy, with a buffer overflow in url.cpp when PAC is enabled and a large PAC file is delivered without a Content-Length header. Public advisories/records indicate impact could lead to crash or arbitrary code execution. Remediation: upgrade to a fixed libproxy version (e....