npm http-proxy vulnerabilities

Latest npm http-proxy CVEs

Newest publication first

1. GHSA-6x33-pw7p-hmpq Denial of Service in http-proxy

   Published 2020-09-04

   High·CVSS 7.5

   Versions of http-proxy prior to 1.18.1 are vulnerable to Denial of Service. An HTTP request with a long body triggers an ERR_HTTP_HEADERS_SENT unhandled exception that crashes the proxy server. This is only possible when the proxy server sets headers in the proxy request using th...

2. CVE-2017-16014 Insufficient Error Handling in http-proxy

   Published 2018-06-04

   High·CVSS 7.5

   Http-proxy is a proxying library. Because of the way errors are handled in versions before 0.7.0, an attacker that forces an error can crash the server, causing a denial of service.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.