Skip to content
OpenAdvisories

Package · npm

http-proxy

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    GHSA-6x33-pw7p-hmpq

    Denial of Service in http-proxy

    Versions of `http-proxy` prior to 1.18.1 are vulnerable to Denial of Service. An HTTP request with a long body triggers an `ERR_HTTP_HEADERS_SENT` unhandled exception that crashes the proxy server. This is only possible when the proxy server sets headers in t…

    http-proxy npm
  • High 7.5
    CVE-2017-16014

    Insufficient Error Handling in http-proxy

    Http-proxy is a proxying library. Because of the way errors are handled in versions before 0.7.0, an attacker that forces an error can crash the server, causing a denial of service.

    HackerOne http-proxy node module http-proxy npm