This affects the package pac-resolver prior to 5.0.0. This can occur when used with untrusted input, due to unsafe PAC file handling. **NOTE:** The fix for this vulnerability is applied in the node-degenerator library, a dependency written by the same maintainer.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
pac-resolver project pac-resolver |