Asymmetric denial of service In http-proxy-middleware
Description
Denial of service in http-proxy-middleware Versions of the package http-proxy-middleware before 2.0.7, from 3.0.0 and before 3.0.3 are vulnerable to Denial of Service (DoS) due to an UnhandledPromiseRejection error thrown by micromatch. An attacker could kill the Node.js process and crash the server by making requests to certain paths.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 npm | 2.0.7, 3.0.3 | ||
 rpm rhel8 | - | - |
Aliases
1. 2. 3. 4.
References
1. 2. 3.