CVE-2018-3739

CVE-2018-3739 is a critical vulnerability affecting https-proxy-agent versions prior to 2.1.1. It stems from improper sanitization of the 'auth' option when passed to the Buffer constructor, leading to denial-of-service and uninitialized memory leaks if an attacker can control this input. With a CVSS score of 9.1, this vulnerability is easily exploitable over the network with no user interaction, potentially resulting in high confidentiality impact and denial of service. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.