Description
Http-proxy is a proxying library. Because of the way errors are handled in versions before 0.7.0, an attacker that forces an error can crash the server, causing a denial of service.
Remediation
References
https://github.com/nodejitsu/node-http-proxy/pull/101
https://nodesecurity.io/advisories/323
Related Vulnerabilities
CVE-2020-4075 Vulnerability in npm package electron
CVE-2020-19676 Vulnerability in maven package com.alibaba.nacos:nacos-api
CVE-2020-24164 Vulnerability in maven package com.taoensso:nippy
CVE-2020-2140 Vulnerability in maven package org.jenkins-ci.plugins:audit-trail
CVE-2021-3827 Vulnerability in maven package org.keycloak:keycloak-services