Description
Http-proxy is a proxying library. Because of the way errors are handled in versions before 0.7.0, an attacker that forces an error can crash the server, causing a denial of service.
Remediation
References
https://nodesecurity.io/advisories/323
https://github.com/nodejitsu/node-http-proxy/pull/101
Related Vulnerabilities
CVE-2020-13957 Vulnerability in maven package org.apache.solr:solr-solrj
CVE-2021-23362 Vulnerability in maven package org.webjars.npm:hosted-git-info
CVE-2022-28156 Vulnerability in maven package com.surenpi.jenkins:phoenix-autotest
CVE-2021-21266 Vulnerability in maven package org.openhab.addons.bundles:org.openhab.binding.insteon
CVE-2020-5242 Vulnerability in maven package org.openhab.addons.bundles:org.openhab.transform.exec