Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/http-proxy-middleware@2.0.8
purl pkg:npm/http-proxy-middleware@2.0.8
Next non-vulnerable version 2.0.9
Latest non-vulnerable version 3.0.5
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-deza-pf5q-cqfy
Aliases:
CVE-2025-32997
GHSA-9gqv-wp59-fq42
In http-proxy-middleware before 2.0.9 and 3.x before 3.0.5, fixRequestBody proceeds even if bodyParser has failed.
2.0.9
Affected by 0 other vulnerabilities.
3.0.5
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-ff18-akd9-ebhu In http-proxy-middleware before 2.0.8 and 3.x before 3.0.4, writeBody can be called twice because "else if" is not used. CVE-2025-32996
GHSA-4www-5p9h-95mh

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-12T19:59:09.152333+00:00 GitLab Importer Fixing VCID-ff18-akd9-ebhu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/http-proxy-middleware/CVE-2025-32996.yml 38.6.0
2026-06-12T19:59:07.994635+00:00 GitLab Importer Affected by VCID-deza-pf5q-cqfy https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/http-proxy-middleware/CVE-2025-32997.yml 38.6.0
2026-06-12T07:52:45.646311+00:00 GithubOSV Importer Fixing VCID-ff18-akd9-ebhu https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/04/GHSA-4www-5p9h-95mh/GHSA-4www-5p9h-95mh.json 38.6.0