Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/18 1:6 p.m.18 views

http-proxy-middleware: multipart/form-data field injection via unescaped CRLF in `fixRequestBody`

Summary fixRequestBody is the library's documented helper for re-emitting a request body that was already consumed by a body parser. When the outgoing Content-Type is multipart/form-data, it rebuilds the body with handlerFormDataBodyData, which interpolates each req.body key and value directly in...

7.5CVSS5.4AI score0.00265EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder