Description
Http-proxy is a proxying library. Because of the way errors are handled in versions before 0.7.0, an attacker that forces an error can crash the server, causing a denial of service.
Remediation
References
https://github.com/nodejitsu/node-http-proxy/pull/101
https://nodesecurity.io/advisories/323
Related Vulnerabilities
CVE-2019-20921 Vulnerability in npm package bootstrap-select
CVE-2022-26477 Vulnerability in maven package org.apache.systemds:systemds
CVE-2019-14837 Vulnerability in maven package org.keycloak:keycloak-services
CVE-2021-43307 Vulnerability in npm package semver-regex
CVE-2023-26149 Vulnerability in maven package org.webjars.npm:quill-mention