Description
Http-proxy is a proxying library. Because of the way errors are handled in versions before 0.7.0, an attacker that forces an error can crash the server, causing a denial of service.
Remediation
References
https://github.com/nodejitsu/node-http-proxy/pull/101
https://nodesecurity.io/advisories/323
Related Vulnerabilities
CVE-2019-9843 Vulnerability in maven package com.diffplug.spotless:spotless-plugin-gradle
CVE-2021-21310 Vulnerability in npm package next-auth
CVE-2020-14340 Vulnerability in maven package org.jboss.xnio:xnio-api
CVE-2023-36542 Vulnerability in maven package org.apache.nifi:nifi-record-serialization-services
CVE-2020-12265 Vulnerability in maven package org.webjars:decompress-tar