Description
Http-proxy is a proxying library. Because of the way errors are handled in versions before 0.7.0, an attacker that forces an error can crash the server, causing a denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HackerOne | http-proxy node module | <=0.6.6 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | http-proxy | < 0.7.0 | 0.7.0 | GHSA-9xw9-pvgv-6p76 |