Memory Exposure in tunnel-agent
Summary
GHSA-xc7v-wxcw-j472: Memory Exposure in tunnel-agent. Affects tunnel-agent versions < 0.6.0. Fixed in 0.6.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The tunnel-agent package is an npm package used for creating HTTP tunnels. It provides functionality for making HTTP requests through a proxy server. The package allows users to specify various proxy settings, including the proxy host, port, and authentication credentials. However, versions of tunnel-agent before 0.6.0 are vulnerable to a memory exposure issue.
Vulnerability Detail
The vulnerability in tunnel-agent arises when user-supplied input is provided to the auth value and is a number. This can lead to memory exposure. An attacker could potentially exploit this vulnerability by providing malicious input, causing sensitive information from memory to be exposed. The vulnerability has a moderate severity rating and is classified under CWE-200.
How To Fix
Latest published version: 0.6.0 as of 23 Oct 2026
npm install tunnel-agent@0.6.0The newest release already contains this fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the tunnel-agent package versions before 0.6.0 are vulnerable to a memory exposure issue. It is recommended to update to the latest version to fix this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for tunnel-agent →
FAQ
The vulnerability can lead to memory exposure, potentially exposing sensitive information to attackers.
You can use the Vulert Playground at Vulert Scanner to check if your application is affected by this vulnerability. Simply provide your package-lock.json file to the playground.
Yes, a proof-of-concept is provided in the vulnerability details. It demonstrates how the vulnerability can be exploited by providing user-supplied input to the auth value.
The vulnerability has a moderate severity rating.
There are no known instances of this vulnerability being exploited in the wild.
References
Related vulnerabilities
Recent vulnerabilities recorded for tunnel-agent.
