VulnerableCode Package Details - pkg:npm/http-proxy@0.6.4

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:npm/http-proxy@0.6.4

Essentials
History (3)

purl	pkg:npm/http-proxy@0.6.4

Next non-vulnerable version	1.18.1
Latest non-vulnerable version	1.18.1
Risk

Vulnerabilities affecting this package (3)

Vulnerability	Summary	Fixed by
VCID-ex6x-938w-6kbp Aliases: GMS-2017-124	Insufficient Error Handling Because of the way errors are handled, an attacker that forces an error can crash the server, causing a denial of service.	0.7.0 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-ftjz-3fh5-j7dz Aliases: GHSA-6x33-pw7p-hmpq GMS-2020-737	Denial of Service in http-proxy Versions of `http-proxy` prior to 1.18.1 are vulnerable to Denial of Service. An HTTP request with a long body triggers an `ERR_HTTP_HEADERS_SENT` unhandled exception that crashes the proxy server. This is only possible when the proxy server sets headers in the proxy request using the `proxyReq.setHeader` function. For a proxy server running on `http://localhost:3000`, the following curl request triggers the unhandled exception: ```curl -XPOST http://localhost:3000 -d "$(python -c 'print("x"*1025)')"``` ## Recommendation Upgrade to version 1.18.1 or later	1.18.1 Affected by 0 other vulnerabilities.
VCID-zgda-rtpk-bfbr Aliases: CVE-2017-16014 GHSA-9xw9-pvgv-6p76	Improper Input Validation An attacker that forces an error can crash the server, causing a denial of service.	0.7.0 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-06-04T20:37:57.356918+00:00	GitLab Importer	Affected by	VCID-ftjz-3fh5-j7dz	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/http-proxy/GMS-2020-737.yml	38.6.0
2026-06-04T20:12:28.798898+00:00	GitLab Importer	Affected by	VCID-zgda-rtpk-bfbr	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/http-proxy/CVE-2017-16014.yml	38.6.0
2026-06-04T20:07:46.259285+00:00	GitLab Importer	Affected by	VCID-ex6x-938w-6kbp	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/http-proxy/GMS-2017-124.yml	38.6.0