npm/http-proxy-middleware

http-proxy-middleware can call writeBody twice because "else if" is not used

Modified: 9/10/2026

http-proxy-middleware `router` host+path substring matching allows Host-header-driven backend routing bypass

Modified: 9/10/2026

http-proxy-middleware allows fixRequestBody to proceed even if bodyParser has failed

Modified: 9/10/2026

Denial of service in http-proxy-middleware

Modified: 9/10/2026

http-proxy-middleware: multipart/form-data field injection via unescaped CRLF in `fixRequestBody`

Modified: 6/18/2026