Skip to content

[GHSA-64mm-vxmg-q3vj] http-proxy-middleware router host+path substring matching allows Host-header-driven backend routing bypass#8072

Open
G-Rath wants to merge 1 commit into
G-Rath/advisory-improvement-8072from
G-Rath-GHSA-64mm-vxmg-q3vj
Open

[GHSA-64mm-vxmg-q3vj] http-proxy-middleware router host+path substring matching allows Host-header-driven backend routing bypass#8072
G-Rath wants to merge 1 commit into
G-Rath/advisory-improvement-8072from
G-Rath-GHSA-64mm-vxmg-q3vj

Commits

Commits on Jun 19, 2026