An open index of dependabot pull requests across open source projects.

http-proxy-middleware

Ecosystem:
npm
Package URL:
pkg:npm/http-proxy-middleware
Total PRs:
7,039 Dependabot PRs
Latest PR:
7 days ago
Unique Repositories:
5,818 repositories
Unique Repos (30 days):
12 repositories
Security Advisories
Denial of service in http-proxy-middleware
GHSA-c7qv-q95q-8v27 CVE-2024-21536 HIGH published almost 2 years ago • updated about 9 hours ago
Versions of the package http-proxy-middleware before 2.0.7, from 3.0.0 and before 3.0.3 are vulnerable to Denial of Service (DoS) due to an Unhandl...
http-proxy-middleware `router` host+path substring matching allows Host-header-driven backend routing bypass
GHSA-64mm-vxmg-q3vj CVE-2026-55602 MODERATE published about 1 month ago • updated about 22 hours ago
# Summary `http-proxy-middleware` documents `router` proxy-table entries as host, path, or host+path selectors, but the host+path implementation u...
http-proxy-middleware: multipart/form-data field injection via unescaped CRLF in `fixRequestBody`
GHSA-gcq2-9pq2-cxqm CVE-2026-55603 HIGH published about 1 month ago • updated about 22 hours ago
## Summary `fixRequestBody()` is the library's documented helper for re-emitting a request body that was already consumed by a body parser. When th...
http-proxy-middleware can call writeBody twice because "else if" is not used
GHSA-4www-5p9h-95mh CVE-2025-32996 MODERATE published over 1 year ago • updated about 9 hours ago
In http-proxy-middleware before 2.0.8 and 3.x before 3.0.4, writeBody can be called twice because "else if" is not used.
http-proxy-middleware allows fixRequestBody to proceed even if bodyParser has failed
GHSA-9gqv-wp59-fq42 CVE-2025-32997 MODERATE published over 1 year ago • updated about 9 hours ago
In http-proxy-middleware before 2.0.9 and 3.x before 3.0.5, fixRequestBody proceeds even if bodyParser has failed.
Recent PRs
Package Details
Name: http-proxy-middleware
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/http-proxy-middleware
JSON API: View JSON
Security Advisories

5

Active advisories
HIGH 2
MODERATE 3
View All npm Advisories
Package Information
Description:

The one-liner node.js proxy middleware for connect, express, next.js and more

Repository: https://github.com/chimurai/http-proxy-middleware
Homepage: https://github.com/chimurai/http-proxy-middleware#readme
Latest Release: 3.0.5
over 1 year ago
Dependent Repos: 2,978,280
Dependent Packages: 8,072
Downloads: 81,517,944
Ranking: Top 0.0059% by dependent repos Top 0.0288% by downloads Top 0.0119% by dependent pkgs
PR Status
Open 3,117 (44.3%)
Merged 1,657 (23.5%)
Closed 1,635 (23.2%)
PR Types
Major 992 (14.1%)
Minor 6 (0.1%)
Patch 5,319 (75.6%)
Removal 36 (0.5%)