VulnSea

http-proxy-middleware has 2 CVEs on record. The median CVSS is 7.5 (high).

CVEs per month

Last 12 months, by publish date

101112010203040506070809
Exploited share
0% vs 1% corpus
Median CVSS
7.5
Publish → KEV
—
Last 90 days
0 prev 2

Products

  • http-proxy-middleware 2
Follow http-proxy-middleware:RSS feedSave a search →Embed badge ↗
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited

Worst active — by depth score

http-proxy-middleware vulnerabilities

CVEs affecting http-proxy-middleware, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-55602Medium
3mo ago

http-proxy-middleware `router` host+path substring matching allows Host-header-driven backend routing bypass

http-proxy-middleware `router` host+path substring matching allows Host-header-driven backend routing bypass

▾ Sunlithttp-proxy-middleware · http-proxy-middlewareEPSS 0.37%via GHSA
CVE-2026-55603High· 7.5
3mo ago

http-proxy-middleware: multipart/form-data field injection via unescaped CRLF in `fixRequestBody`

http-proxy-middleware: multipart/form-data field injection via unescaped CRLF in `fixRequestBody`

▾ Twilighthttp-proxy-middleware · http-proxy-middlewareEPSS 0.29%via GHSA
http-proxy-middleware vulnerabilities (CVEs) · VulnSea