CyberSecBulletin

Http-proxy-middleware vulnerabilities

We track 1 vulnerability in Http-proxy-middleware products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 19, 2024.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Http-proxy-middleware vulnerabilities

  • 7.5 High severity

    http-proxy-middleware: Uncontrolled Resource Consumption

    CVE-2024-21536Http-proxy-middlewareEPSS 1.03%

    Versions of the package http-proxy-middleware before 2.0.7, from 3.0.0 and before 3.0.3 are vulnerable to Denial of Service (DoS) due to an UnhandledPromiseRejection error thrown by micromatch. An attacker could kill the Node.js process and crash the server by