地图 / Proxy credentials leaked in ERR_PROXY_TUNNEL error message

Proxy credentials leaked in ERR_PROXY_TUNNEL error message

信息泄露 / 隐私侵犯 / #3720313

厂商: Node.js
严重程度: 低危 · CVSS 5.9
赏金: —
弱点: 隐私侵犯
研究员: @nssys
披露日期: 2026-06-25
资产: https://github.com/nodejs/node
CVE: CVE-2026-48615

该报告还没有中文解读。

时间线

2026-05-08报告提交
2026-06-25公开披露

阅读 HackerOne 原文 ↗作者 @nssys · 版权归作者与 Node.js 所有

同类报告

Physical Laptop TakeoverEd · 2018-08-12 Connection informaton is sent to a third-party serviceNord Security · —Blocked user can see live videoTikTok · 2021-05-28 · $418 Twitter ID exposure via error-based side-channel attackX / xAI · 2019-05-16 · $1,470 Intent Leads To Unauthorised Video Call Initiation Leaking Surrounding Informations Of VictimSnapchat · 2024-04-05 Changing email address on Twitter for Android unsets "Protect your Tweets"X / xAI · 2019-01-18 · $2,940