logo

Database

Asymmetric denial of service In http-proxy-middleware

Description

http-proxy-middleware allows fixRequestBody to proceed even if bodyParser has failed In http-proxy-middleware before 2.0.9 and 3.x before 3.0.5, fixRequestBody proceeds even if bodyParser has failed.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2025-329972. NVD-2025-329973. OSV-2025-329974. GCVE-2025-32997

References

1. https://github.com/chimurai/http-proxy-middleware/pull/10962. https://github.com/chimurai/http-proxy-middleware/commit/1bdccbeec243850f1d2bb50ea0ff2151e725d67e3. https://github.com/chimurai/http-proxy-middleware/releases/tag/v2.0.94. https://github.com/chimurai/http-proxy-middleware/releases/tag/v3.0.5

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.

FLAT-24OSK – Vulnerability | Fluid Attacks Database