fastify-http-proxy
NPM
Releases43
Frequency1 month 6 days
Last Release
`[email protected]` has been deprecated. Please use `@fastify/[email protected]` instead.
CVE History
| CVE | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|
| 10 CRITICAL | 7.5 HIGH | ||
fastify-http-proxy is an npm package which is a fastify plugin for proxying your http requests to another server, with hooks. By crafting a specific URL, it is possible to escape the prefix of the proxied backend service. If the base url of the proxied server is `/pub/`, a user expect that accessing `/priv` on the target service would not be possible. In affected versions, it is possible. This is fixed in version 4.3.1. | |||