Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-gcq2-9pq2-cxqm
  • npm/http-proxy-middleware
 http-proxy-middleware: multipart/form-data field injection via unescaped CRLF in `fixRequestBody` 18 Jun
  • Fix available
  • Severity - 7.5 (High)
GHSA-64mm-vxmg-q3vj
  • npm/http-proxy-middleware
 http-proxy-middleware `router` host+path substring matching allows Host-header-driven backend routing bypass 18 Jun
  • Fix available
  • Severity - 6.9 (Medium)
GHSA-4www-5p9h-95mh
  • npm/http-proxy-middleware
 http-proxy-middleware can call writeBody twice because "else if" is not used 15 Apr 2025
  • Fix available
  • Severity - 4.0 (Medium)
GHSA-9gqv-wp59-fq42
  • npm/http-proxy-middleware
 http-proxy-middleware allows fixRequestBody to proceed even if bodyParser has failed 15 Apr 2025
  • Fix available
  • Severity - 4.0 (Medium)
GHSA-c7qv-q95q-8v27
  • npm/http-proxy-middleware
 Denial of service in http-proxy-middleware 19 Oct 2024
  • Fix available
  • Severity - 7.5 (High)
MAL-2024-1164
  • npm/paysafe-gpf-as-http-proxy-middleware-body-replace
 Malicious code in paysafe-gpf-as-http-proxy-middleware-body-replace (npm) 02 Apr 2024
  • No fix available