search

TooTallNate / superagent-proxy

`Request#proxy(uri)` superagent extension
154 stars 46 forks source link

CVE-2021-23406 - update dependency on proxy-agent to v 5.0.0 #40

Closed mendhak closed 3 years ago

mendhak commented 3 years ago

Hi @TooTallNate thanks for fixing the pac-resolver, pac-proxy-agent and proxy-agent packages.

As this package has a dependency on those, please could the dependency on proxy-agent be bumped to 5.0.0.

That way the fix can make its way downstream.

Reference: https://httptoolkit.tech/blog/npm-pac-proxy-agent-vulnerability/

Sytten commented 3 years ago

We also happen to need this update