Description
Http-proxy is a proxying library. Because of the way errors are handled in versions before 0.7.0, an attacker that forces an error can crash the server, causing a denial of service.
Remediation
References
https://nodesecurity.io/advisories/323
https://github.com/nodejitsu/node-http-proxy/pull/101
Related Vulnerabilities
CVE-2012-0394 Vulnerability in maven package org.apache.struts:struts2-core
CVE-2019-15609 Vulnerability in npm package kill-port-process
CVE-2019-10384 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2019-5480 Vulnerability in npm package statichttpserver
CVE-2021-39132 Vulnerability in maven package org.rundeck:rundeck-core