CVE-2019-10196

A flaw was found in http-proxy-agent, prior to version 2.1.0. It was discovered http-proxy-agent passes an auth option to the Buffer constructor without proper sanitization. This could result in a Denial of Service through the usage of all available CPU resources and data exposure through an uninitialized memory leak in setups where an attacker could submit typed input to the auth parameter.

• CWE-665

• https://bugzilla.redhat.com/show_bug.cgi?id=1567245Issue Tracking, Patch, Third Party Advisory
• https://www.npmjs.com/advisories/607Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1567245Issue Tracking, Patch, Third Party Advisory
• https://www.npmjs.com/advisories/607Third Party Advisory

Published

Mar 19, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-10190A vulnerability was discovered in DNS resolver component of …7.5
• CVE-2019-10191A vulnerability was discovered in DNS resolver of knot resol…7.5
• CVE-2019-10192A heap-buffer overflow vulnerability was found in the Redis …7.2
• CVE-2019-10193A stack-buffer overflow vulnerability was found in the Redis…7.2
• CVE-2019-10194Sensitive passwords used in deployment and configuration of …5.5
• CVE-2019-10195A flaw was found in IPA, all 4.6.x versions before 4.6.7, al…6.5
• CVE-2019-10197A flaw was found in samba versions 4.9.x up to 4.9.13, samba…6.5
• CVE-2019-10198An authentication bypass vulnerability was discovered in for…6.5
• CVE-2019-10199It was found that Keycloak's account console, up to 6.0.1, d…8.8
• CVE-2019-1020Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-10200A flaw was discovered in OpenShift Container Platform 4 wher…7.2
• CVE-2019-1020001yard before 0.9.20 allows path traversal.