http-proxy-middleware vulnerabilities (npm)

5 vulnerabilities.

• http-proxy-middleware npm http-proxy-middleware: multipart/form-data field injection via unescaped CRLF in `fixRequestBody` CVE-2026-55603 Fix available 7.5 HighJune 18, 2026
• http-proxy-middleware npm Denial of service in http-proxy-middleware CVE-2024-21536 Fix available 8.7 HighOctober 19, 2024
• http-proxy-middleware npm http-proxy-middleware `router` host+path substring matching allows Host-header-driven backend routing bypass CVE-2026-55602 Fix available 6.9 MediumJune 5, 2019
• http-proxy-middleware npm Arbitrary Code Execution in handlebars CVE-2025-32997 Fix available 4.0 MediumJune 5, 2019
• http-proxy-middleware npm Arbitrary Code Execution in handlebars CVE-2025-32996 Fix available 4.0 MediumJune 5, 2019