Vendors / chimurai Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now chimurai records in CISA KEV No chimurai vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 77
Versions of the package http-proxy-middleware before 2.0.7, from 3.0.0 and before 3.0.3 are vulnerable to Denial of Service (DoS) due to an UnhandledPromiseRejection error thrown by micromatch.
CVSS 4.0 HIGH 8.7· Network · No auth · No interaction · EPSS 0.01034 · Published 2024-10-19 · Partial fix · 2.0.7, 3.0.3 CWE-400
Priority HIGH 70
http-proxy-middleware is node.js http-proxy middleware.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00378 · Published 2026-06-22 · Fixed in 4.1.0, 3.0.6 +1 CWE-187
Priority HIGH 66
http-proxy-middleware is node.js http-proxy middleware.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00286 · Published 2026-06-22 · Partial fix · 3.0.7, 4.1.1 CWE-93
Priority LOW 24
In http-proxy-middleware before 2.0.9 and 3.x before 3.0.5, fixRequestBody proceeds even if bodyParser has failed.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00472 · Published 2025-04-15 · Partial fix · 2.0.9, 3.0.5 CWE-754
Priority LOW 24
In http-proxy-middleware before 2.0.8 and 3.x before 3.0.4, writeBody can be called twice because "else if" is not used.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00466 · Published 2025-04-15 · Partial fix · 2.0.8, 3.0.4 CWE-670
Open these records in search → All records by CVSS severity
0 2 3 0 0
THREATIST.IORead the docs