Skip to content

Known vulnerabilities in chimurai http-proxy-middleware

Is your version affected?

CVE Summary Score Published
CVE-2026-55603 http-proxy-middleware is node.js http-proxy middleware 7.5 High Jun 22, 2026
CVE-2026-55602 http-proxy-middleware is node.js http-proxy middleware 6.9 Medium Jun 22, 2026
CVE-2025-32997 In http-proxy-middleware before 2.0.9 and 3.x before 3.0.5, fixRequestBody proceeds even if bodyParser has failed 4.0 Medium Apr 15, 2025
CVE-2025-32996 In http-proxy-middleware before 2.0.8 and 3.x before 3.0.4, writeBody can be called twice because "else if" is not used 4.0 Medium Apr 15, 2025
CVE-2024-21536 Versions of the package http-proxy-middleware before 2.0.7, from 3.0.0 and before 3.0.3 are vulnerable to Denial of… 7.5 High Oct 19, 2024