CVE-2026-62985: Sync Throw In Http Agent Createconnection
Synchronous `throw` of a connection error inside createConnection() of an http(s).Agent subclass. Node calls agent.createConnection() synchronously from the ClientRequest constructor (agent.addRequest -> createSocket -> createConnection) without a try/catch and expects connection failures to be reported asynchronously: by returning a socket that emits 'error
JSgreprules fetch cve-2026-62985-sync-throw-in-http-agent-createconnection --engine opengrepDescription
Synchronous `throw` of a connection error inside createConnection() of an http(s).Agent subclass. Node calls agent.createConnection() synchronously from the ClientRequest constructor (agent.addRequest -> createSocket -> createConnection) without a try/catch and expects connection failures to be reported asynchronously: by returning a socket that emits 'error
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.