Chimurai vulnerabilities
We track 3 vulnerabilities in Chimurai products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 22, 2026.
Latest Chimurai vulnerabilities
- 7.5 High severity
http-proxy-middleware: Improper Neutralization of CRLF Sequences
http-proxy-middleware is node.js http-proxy middleware. From 3.0.4 until 3.0.7 and 4.1.1, fixRequestBody() is the library's documented helper for re-emitting a request body that was already consumed by a body parser. When the outgoing Content-Type is multipart
- 8.6 High severity
http-proxy-middleware is node.js http-proxy middleware.
http-proxy-middleware is node.js http-proxy middleware. From 0.16.0 until 2.0.10, 3.0.6, and 4.1.0, http-proxy-middleware documents router proxy-table entries as host, path, or host+path selectors, but the host+path implementation uses unanchored substring mat
- 7.5 High severity
http-proxy-middleware: Uncontrolled Resource Consumption
Versions of the package http-proxy-middleware before 2.0.7, from 3.0.0 and before 3.0.3 are vulnerable to Denial of Service (DoS) due to an UnhandledPromiseRejection error thrown by micromatch. An attacker could kill the Node.js process and crash the server by