Skip to content
OpenAdvisories

Package · npm

http-proxy-middleware

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-55603

    http-proxy-middleware: multipart/form-data field injection via unescaped CRLF in `fixRequestBody`

    http-proxy-middleware is node.js http-proxy middleware. From 3.0.4 until 3.0.7 and 4.1.1, fixRequestBody() is the library's documented helper for re-emitting a request body that was already consumed by a body parser. When the outgoing Content-Type is multipar…

    chimurai http-proxy-middleware http-proxy-middleware npm
  • High 7.5
    CVE-2024-21536

    Denial of service in http-proxy-middleware

    Versions of the package http-proxy-middleware before 2.0.7, from 3.0.0 and before 3.0.3 are vulnerable to Denial of Service (DoS) due to an UnhandledPromiseRejection error thrown by micromatch. An attacker could kill the Node.js process and crash the server b…

    http-proxy-middleware npm