GitHub Advisoryadvisory · npm
GHSA-9xw9-pvgv-6p76 Insufficient Error Handling in http-proxy
HIGH
Official page ↗
- Aliases
- CVE-2017-16014
- Ecosystem
- npm
- Packages
- http-proxy
- Severity
- High
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-703
- Reviewed
- 2020-06-16
Affected packages
• npm http-proxy: < 0.7.0 → fixed in 0.7.0
Description
Affected versions of `http-proxy` are vulnerable to a denial of service attack, wherein an attacker can force an error which will cause the server to crash.
Recommendation
Update to version 0.7.0 or later.
Related
Alias · CVE (1)
- CVE-2017-16014 Http-proxy is a proxying library. vulnerability
Weakness · CWE (1)
- CWE-703 Improper Check or Handling of Exceptional Conditions weakness