`http-proxy-middleware`

Ecosystem:
npm

Package URL:
pkg:npm/http-proxy-middleware

Total PRs:
6,425 Dependabot PRs

Latest PR:
about 15 hours ago

Unique Repositories:
5,319 repositories

Unique Repos (30 days):
43 repositories

Security Advisories

http-proxy-middleware can call writeBody twice because "else if" is not used

GHSA-4www-5p9h-95mh CVE-2025-32996 MODERATE published 7 months ago • updated 30 minutes ago

In http-proxy-middleware before 2.0.8 and 3.x before 3.0.4, writeBody can be called twice because "else if" is not used.

http-proxy-middleware allows fixRequestBody to proceed even if bodyParser has failed

GHSA-9gqv-wp59-fq42 CVE-2025-32997 MODERATE published 7 months ago • updated 30 minutes ago

In http-proxy-middleware before 2.0.9 and 3.x before 3.0.5, fixRequestBody proceeds even if bodyParser has failed.

2.0.6 → 2.0.9 Patch PR

Open about 2 months ago

Bump the npm_and_yarn group across 1 directory with 9 updates

Maayur28/shofferstop #1

2.0.6 → 2.0.9 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 11 updates

batuhan-basoglu/Kene-s-Cribs-Website #216

2.0.6 → 2.0.9 Patch PR

Closed about 2 months ago

Bump the npm_and_yarn group across 1 directory with 15 updates

sankichi92/shikuchoson-hazardmap-template #63

2.0.4 → 2.0.9 Patch PR

Open about 2 months ago

Bump the npm_and_yarn group across 18 directories with 6 updates

deadBlueShark/education #114

2.0.1 → 2.0.9 Patch PR

Open about 2 months ago

chore(deps): bump the npm_and_yarn group across 1 directory with 22 updates

ANT0071/Yatai #1

2.0.1 → 2.0.9 Patch PR

Open about 2 months ago

Build(deps): Bump the npm_and_yarn group across 4 directories with 4 updates

Laisky/one-api #213

2.0.7 → 2.0.9 Patch PR

Open about 2 months ago

Bump the npm_and_yarn group across 2 directories with 23 updates

anjapetry/react-typescript-cheatsheet #2

2.0.6 → 2.0.9 Patch PR

Merged about 2 months ago

chore(deps): bump the npm_and_yarn group across 1 directory with 9 updates

UWHealth/react-suspended-vulnerable-application #4

2.0.6 → 2.0.9 Patch PR

Open about 2 months ago

Bump the npm_and_yarn group across 15 directories with 6 updates

deadBlueShark/education #113

2.0.1 → 2.0.9 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 11 updates

luckyhegde6/FastApi-React-App #1

2.0.6 → 2.0.9 Patch PR

Open about 2 months ago

Bump the npm_and_yarn group across 14 directories with 6 updates

deadBlueShark/education #112

2.0.1 → 2.0.9 Patch PR

Open about 2 months ago

Bump the npm_and_yarn group across 2 directories with 8 updates

khulnasoft/ThreatPot #75

2.0.6 → 2.0.9 Patch PR

Open about 2 months ago

Bump the npm_and_yarn group across 1 directory with 19 updates

legostat/pizzastack-admin #1

2.0.6 → 2.0.9 Patch PR

Open about 2 months ago

build(deps): bump the npm_and_yarn group across 3 directories with 14 updates

khulnasoft/rustbolt-resolver #2

3.0.3 → 3.0.5 Patch PR

Open about 2 months ago

Bump the npm_and_yarn group across 1 directory with 18 updates

anjapetry/netflix-clone-react #1

2.0.6 → 2.0.9 Patch PR

Open about 2 months ago

build(deps): bump the npm_and_yarn group across 2 directories with 19 updates

agrawal-rohit/pearl-ui #429

2.0.6 → 2.0.9 Patch PR

Open about 2 months ago

build(deps-dev): bump the development-dependencies group with 4 updates

Projekt-Construct-X/portal-assets #8

2.0.7 → 2.0.9 Patch PR

Open about 2 months ago 1 comment

Bump http-proxy-middleware from 2.0.7 to 2.0.9 in /frontend

573clt88-oss/A.I.-BUG-HUNTER-AND-CODE-ANALYZER #1

2.0.7 → 2.0.9 Patch PR

Merged about 2 months ago

Bump the npm_and_yarn group across 2 directories with 16 updates

getsuperhost/ajenti #1

2.0.6 → 2.0.9 Patch PR

Open about 2 months ago

Bump the npm_and_yarn group across 1 directory with 2 updates

LedoKun/MedFlowGuide #1

2.0.7 → 2.0.9 Patch PR

Open about 2 months ago

Bump the npm_and_yarn group across 1 directory with 14 updates

RoxanneLottier/Kasa #8

2.0.6 → 2.0.9 Patch PR

Open about 2 months ago

Bump http-proxy-middleware from 2.0.6 to 2.0.9

MITLibraries/Primo-NDE-Customization-Package #5

2.0.6 → 2.0.9 Patch PR

Open about 2 months ago

Bump http-proxy-middleware from 2.0.6 to 2.0.9 in /new_tumkru_analytics

Spero-HealthCare-Innovation/DMS-Tumkur #18

2.0.6 → 2.0.9 Patch PR

Merged about 2 months ago

Bump the npm_and_yarn group across 1 directory with 18 updates

Sava4/TestRepo #1

2.0.6 → 2.0.9 Patch PR

Open about 2 months ago

Bump the npm_and_yarn group across 1 directory with 4 updates

wa8w1r3/CCTV-Operator-View-Web-Site---Frontend #1

2.0.7 → 2.0.9 Patch PR

Open about 2 months ago

Bump http-proxy-middleware from 2.0.6 to 2.0.9 in /website

Aumi4O/SalesGPT #6

2.0.6 → 2.0.9 Patch PR

Open about 2 months ago

Bump http-proxy-middleware from 2.0.7 to 2.0.9

threadi/category-and-tag-feeds #31

2.0.7 → 2.0.9 Patch PR

Merged about 2 months ago

Bump http-proxy-middleware from 2.0.1 to 2.0.9 in the npm_and_yarn group across 1 directory

Nardol/frontend #4

2.0.1 → 2.0.9 Patch PR

Open about 2 months ago

Bump http-proxy-middleware from 2.0.1 to 2.0.9 in the npm_and_yarn group across 1 directory

Nardol/zigbee2mqtt.io #1

2.0.1 → 2.0.9 Patch PR

Open about 2 months ago

Bump http-proxy-middleware from 2.0.7 to 2.0.9 in /frontend

j7xi8kk/idea-generator #5

2.0.7 → 2.0.9 Patch PR

Open about 2 months ago

Bump http-proxy-middleware from 2.0.7 to 2.0.9 in /frontend

j7xi8kk/app #2

2.0.7 → 2.0.9 Patch PR

Open about 2 months ago

Bump http-proxy-middleware from 2.0.7 to 2.0.9

zopdev/ui-components #25

2.0.7 → 2.0.9 Patch PR

Merged about 2 months ago

Bump http-proxy-middleware from 2.0.6 to 2.0.9 in /kr-engne/www

kilork/kr_engine #30

2.0.6 → 2.0.9 Patch PR

Open about 2 months ago

Bump http-proxy-middleware from 2.0.6 to 2.0.9

RadoslavPavlinchov/mern-exercise-tracker #45

2.0.6 → 2.0.9 Patch PR

Merged about 2 months ago

chore(deps): bump http-proxy-middleware from 2.0.6 to 2.0.9 in /docs

billlzzz10/langchain #3

2.0.6 → 2.0.9 Patch PR

Open about 2 months ago

Bump the npm_and_yarn group across 1 directory with 21 updates

vuhnger/vuhnger.github.io #31

2.0.4 → 2.0.9 Patch PR

Open about 2 months ago

Bump the npm_and_yarn group across 1 directory with 23 updates

vuhnger/vuhnger.github.io #30

2.0.4 → 2.0.9 Patch PR

Open about 2 months ago

Bump the npm_and_yarn group across 1 directory with 21 updates

vuhnger/vuhnger.github.io #29

2.0.4 → 2.0.9 Patch PR

Closed about 2 months ago 2 comments

Bump http-proxy-middleware from 2.0.6 to 2.0.9 in /urbanui-plus-react-cb99035af132/template/demo_4

dotkaio/react-dashboards #292

2.0.6 → 2.0.9 Patch PR

Open about 2 months ago

chore(deps): bump http-proxy-middleware from 2.0.6 to 2.0.7 in the npm_and_yarn group across 0 directory

dukeblue1994-glitch/cxi-web #16

2.0.6 → 2.0.7 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 18 updates

fran6jr/calculator #2

2.0.6 → 2.0.9 Patch PR

Merged about 2 months ago

Bump the npm_and_yarn group across 1 directory with 18 updates

fran6jr/products-store #1

2.0.6 → 2.0.9 Patch PR

Open about 2 months ago

Bump http-proxy-middleware from 2.0.6 to 2.0.9

jananga99/training-web #7

2.0.6 → 2.0.9 Patch PR

Open about 2 months ago

Bump http-proxy-middleware from 2.0.6 to 2.0.9

jananga99/React_Context_Boilerplate #2

2.0.6 → 2.0.9 Patch PR

Open about 2 months ago

Bump http-proxy-middleware from 2.0.6 to 2.0.9 in /frontend

ingojaeckel/go-raspberry-pi-timelapse #80

2.0.6 → 2.0.9 Patch PR

Open about 2 months ago

Bump http-proxy-middleware and lwr

dreaminforce/LWCLab #1

2.0.7 → 2.0.9 Patch PR

Open about 2 months ago

Bump http-proxy-middleware from 2.0.7 to 2.0.9 in /fing/starters-main/vue

Circuit-Overtime/elixpo_chapter #123

2.0.7 → 2.0.9 Patch PR

Open about 2 months ago

chore(deps): bump http-proxy-middleware from 2.0.6 to 2.0.9 in /website in the npm_and_yarn group across 1 directory

stochastic-sisyphus/Noi #5

2.0.6 → 2.0.9 Patch PR

Open about 2 months ago

Bump http-proxy-middleware from 2.0.3 to 2.0.9 in /セクション7/section7

daishiman/codesandbox-test #102

2.0.3 → 2.0.9 Patch PR

Open about 2 months ago

Package Details

Name:	`http-proxy-middleware`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/http-proxy-middleware`
JSON API:	View JSON

Security Advisories

3

Active advisories

HIGH 1

MODERATE 2

View All npm Advisories

Package Information

Description:

The one-liner node.js proxy middleware for connect, express, next.js and more

Repository:	https://github.com/chimurai/http-proxy-middleware
Homepage:	https://github.com/chimurai/http-proxy-middleware#readme
Latest Release:	`3.0.5` 7 months ago
Dependent Repos:	2,978,280
Dependent Packages:	8,072
Downloads:	81,517,944
Ranking:	Top 0.0059% by dependent repos Top 0.0288% by downloads Top 0.0119% by dependent pkgs

PR Status

Open 2,885 (44.9%)

Merged 1,655 (25.8%)

Closed 1,255 (19.5%)

PR Types

Removal 31 (0.5%)

Minor 1 (0.0%)

Major 902 (14.0%)

Patch 4,806 (74.8%)

http-proxy-middleware

Security Advisories

http-proxy-middleware can call writeBody twice because "else if" is not used

http-proxy-middleware allows fixRequestBody to proceed even if bodyParser has failed

Denial of service in http-proxy-middleware

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

3

Package Information

PR Status

PR Types

`http-proxy-middleware`