Post
Matteo Collina
nodeland.dev
did:plc:2q7mnid6di5sxgzzpsdvdu47
🟠 High: SOCKS5 cross-origin routing (CVE-2026-6734).
Socks5ProxyAgent reused one connection pool across origins without checking the origin matched. Requests/credentials could go to the wrong destination.
Fixed in 7.28.0 / 8.2.0.
2026-06-18T15:59:01.363Z