Skip to main content
cve.nowby Sazabi
← npm
npmPackage

request-filtering-agent

2 known vulnerabilities (1 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
3.2.1 (Jun 29, 2026): no advisory affects it
Newest unaffected release
3.2.1 (Jun 29, 2026), the latest release
Advisories
2 · 1 high, 1 medium
Weekly downloads
327.3K
Dependents
26
Releases
16 since 1.0.1 (Aug 29, 2019)
Registry
npm
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 2

  • request-filtering-agent: Synchronous throw from createConnection() for literal private-IP hosts bypasses req.on('error'), crashing the Node.js process

    Affected: fixed in 3.2.1.

    Fixed in 3.2.1 (released Jun 29, 2026, 85 days before disclosure).

    The latest release, 3.2.1, is not affected.

    42% of request-filtering-agent downloads last week were affected versions (173.9K).

  • CVE-2025-57814Medium 5.5

    request-filtering-agent SSRF Bypass via HTTPS Requests

    Affected: fixed in 2.0.0.

    Fixed in 2.0.0 (released Oct 21, 2023, 674 days before disclosure).

    The latest release, 3.2.1, is not affected.

    1.9% of request-filtering-agent downloads last week were affected versions (7.8K).