NextGuard
UNKNOWNCVE-2024-21536

Denial of service in http-proxy-middleware

Platform

nodejs

Component

http-proxy-middleware

Fixed in

2.0.7

View on NVD

Versions of the package http-proxy-middleware before 2.0.7, from 3.0.0 and before 3.0.3 are vulnerable to Denial of Service (DoS) due to an UnhandledPromiseRejection error thrown by micromatch. An attacker could kill the Node.js process and crash the server by making requests to certain paths.

How to fix

Actualice el paquete http-proxy-middleware a la versión 2.0.7 o superior, o a la versión 3.0.3 o superior. Esto corrige la vulnerabilidad de denegación de servicio causada por un error UnhandledPromiseRejection. Ejecute `npm install http-proxy-middleware@latest` o `yarn add http-proxy-middleware@latest` para obtener la versión más reciente.

Monitor your dependencies automatically

Get notified when new vulnerabilities affect your projects. Free forever.

Start free