nopro (0.0.2) potentially affected by CVE-2017-16014 via http-proxy (0.6.6)

http-proxy NPM version 0.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on http-proxy and may be impacted: - nopro 0.0.2 Source cves: CVE-2017-16014 Source advisory: OSV:GHSA-9XW9-PVGV-6P76...

CVE-2017-16014

Http-proxy is a proxying library. Because of the way errors are handled in versions before 0.7.0, an attacker that forces an error can crash the server, causing a denial of service...

CVE-2017-16014

CVE-2017-16014 affects the http-proxy library (Node.js). Older versions pre-0.7.0 mishandled errors, allowing an attacker who forces an error to crash the server, causing a denial of service. Public advisories (GitHub GHSA-9XW9-PVGV-6P76; OSV/Red Hat/Debian entries) confirm the vulnerability in a...

CVE-2017-16014

Http-proxy is a proxying library. Because of the way errors are handled in versions before 0.7.0, an attacker that forces an error can crash the server, causing a denial of service...

CVE-2017-16014

Http-proxy is a proxying library. Because of the way errors are handled in versions before 0.7.0, an attacker that forces an error can crash the server, causing a denial of service...