CVE:CVE-2019-10196
CNNVD:CNNVD-202103-1220
Nathan Rajlich node-http-proxy-agent是  （Nathan Rajlich）开源的一个应用程序。提供了一种http.Agent连接到指定的HTTP或HTTPS代理服务器的实现，并且可以与内置http模块一起使用。
http-proxy-agent prior to version 2.1.0 存在安全漏洞，该漏洞源于攻击者可利用该漏洞在设置中提交类型化输入到auth参数，从而导致未初始化的内存泄漏，从而暴露数据。
solution:Upgrade http-proxy-agent_project http-proxy-agent to a higher version than 2.1.0,and avoid the version (,2.1.0); Upgrade fedoraproject fedora to a higher version than 27,and avoid the version 27; Upgrade redhat software_collections to a higher version than -; Upgrade redhat enterprise_linux to a higher version than 7.0,and avoid the version 7.0