Skip to content
CVE PROGRAM SOURCE RECORD4.0 Medium

CVE-2025-32997

In http-proxy-middleware before 2.0.9 and 3.x before 3.0.5, fixRequestBody proceeds even if bodyParser has failed.

Description

In http-proxy-middleware before 2.0.9 and 3.x before 3.0.5, fixRequestBody proceeds even if bodyParser has failed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

chimurai http-proxy-middleware

Default version status: unaffected

  • 0 to < 2.0.9affected
  • 3.0.0 to < 3.0.5affected

References