http-proxy-middleware
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| http-proxy-middleware `router` host+path substring matching allows Host-header-driven backend routing bypass | http-proxy-middleware | npm | Medium | Fix reported | |
| http-proxy-middleware allows fixRequestBody to proceed even if bodyParser has failed | http-proxy-middlewareCryostat 3/io.cryostat-cryostat3 | npmRed Hat | Medium | Fix reported | |
| http-proxy-middleware can call writeBody twice because "else if" is not used | http-proxy-middlewareCryostat 3/io.cryostat-cryostat3 | npmRed Hat | Medium | Fix reported | |
| Denial of service in http-proxy-middleware | http-proxy-middlewareCryostat 3/io.cryostat-cryostat3 | npmRed Hat | High | Fix reported | |
| http-proxy-middleware: multipart/form-data field injection via unescaped CRLF in `fixRequestBody` | http-proxy-middlewareRed Hat Trusted Profile Analyzer/rhtpa/rhtpa-trustification-service-rhel9 | npmRed Hat | High | Fix reported |