~ / search / GHSA-9gqv-wp59-fq42

GHSA-9gqv-wp59-fq42

http-proxy-middleware allows fixRequestBody to proceed even if bodyParser has failed

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-32997

Packages

EcosystemPackageAffectedFixed in
npm http-proxy-middleware >= 1.3.0, < 2.0.9 2.0.9
npm http-proxy-middleware >= 3.0.0, < 3.0.5 3.0.5

Details

As written in the advisory (Markdown source, shown as plain text).

In http-proxy-middleware before 2.0.9 and 3.x before 3.0.5, fixRequestBody proceeds even if bodyParser has failed.

References

External links from the advisory. They lead to third-party sites.