What’s Vulnerable › Products

chimurai http-proxy-middleware vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your chimurai http-proxy-middleware version is affected

Latest chimurai http-proxy-middleware vulnerabilities

• CVE-2026-55603 — http-proxy-middleware: multipart/form-data field injection via unescaped CRLF in `fixRequestBody` (CVSS 7.5)
• CVE-2026-55602 — http-proxy-middleware `router` host+path substring matching allows Host-header-driven backend routing bypass (CVSS 8.6)
• CVE-2025-32997 — (CVSS 5.3)
• CVE-2025-32996 — (CVSS 5.3)
• CVE-2024-21536 — Denial of service in http-proxy-middleware (CVSS 7.5)