http-proxy-middleware vulnerabilities

1 known vulnerability in http-proxy-middleware from Http-proxy-middleware. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  http-proxy-middleware: Uncontrolled Resource Consumption

  CVE-2024-21536Oct 19, 2024Http-proxy-middlewareEPSS 1.03%

  Versions of the package http-proxy-middleware before 2.0.7, from 3.0.0 and before 3.0.3 are vulnerable to Denial of Service (DoS) due to an UnhandledPromiseRejection error thrown by micromatch. An attacker could kill the Node.js process and crash the server by