Lucene search
+L

11 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2025-11356

Malicious code in bioql PyPI...

4CVSS5.2AI score0.00466EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2025/09/14 12:00 a.m.•3 views

Linux Distros Unpatched Vulnerability : CVE-2025-32996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In http-proxy-middleware before 2.0.8 and 3.x before 3.0.4, writeBody can be called twice because else if is not used. CVE-2025-32996 Note that Nessus relies on...

5.3CVSS4.9AI score0.00466EPSS
SaveExploits0References2
osv_ghsa
osv_ghsa
•added 2025/04/15 3:30 a.m.•30 views

GHSA-4WWW-5P9H-95MH http-proxy-middleware can call writeBody twice because "else if" is not used

In http-proxy-middleware before 2.0.8 and 3.x before 3.0.4, writeBody can be called twice because "else if" is not used...

4CVSS5.8AI score0.00466EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2025/04/15 3:30 a.m.•41 views

http-proxy-middleware can call writeBody twice because "else if" is not used

In http-proxy-middleware before 2.0.8 and 3.x before 3.0.4, writeBody can be called twice because "else if" is not used...

5.3CVSS6.8AI score0.00466EPSS
SaveExploits0References6Affected Software1
NVD
NVD
•added 2025/04/15 3:15 a.m.•26 views

CVE-2025-32996

In http-proxy-middleware before 2.0.8 and 3.x before 3.0.4, writeBody can be called twice because "else if" is not used...

5.3CVSS0.00466EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/04/15 12:00 a.m.•11 views

http-proxy-middleware 安全漏洞

http-proxy-middleware is a Node.js http proxy middleware for connect, express, next.js, etc. by Steven Chim Personal Developer. A security vulnerability exists in http-proxy-middleware versions prior to 2.0.8 and prior to 3.0.4, which stems from the fact that writeBody may be called twice...

5.3CVSS6.5AI score0.00466EPSS
SaveExploits0References2
CVE
CVE
•added 2025/04/15 12:00 a.m.•176 views

CVE-2025-32996

CVE-2025-32996 affects the http-proxy-middleware project where, in versions before 2.0.8 and 3.x before 3.0.4, writeBody can be called twice because an else-if is missing. This is the underlying root cause and is reflected in related IBM and IBM X-Force bulletins that cite the same description. T...

5.3CVSS7.2AI score0.00466EPSS
SaveExploits0References4Affected Software1
Mend
Mend
•added 2025/04/15 12:00 a.m.•6 views

CVE-2025-32996

In http-proxy-middleware before 2.0.8 and 3.x before 3.0.4, writeBody can be called twice because "else if" is not used...

6.3CVSS0.00466EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/04/15 12:00 a.m.•19 views

PT-2025-16283

Name of the Vulnerable Software and Affected Versions http-proxy-middleware versions 2.0.7 and earlier, http-proxy-middleware versions 3.x before 3.0.4 Description The issue arises because writeBody can be called twice due to the absence of "else if". This can lead to information disclosure...

5.3CVSS5.4AI score0.00466EPSS
SaveExploits0References16
Cvelist
Cvelist
•added 2025/04/15 12:00 a.m.•33 views

CVE-2025-32996

In http-proxy-middleware before 2.0.8 and 3.x before 3.0.4, writeBody can be called twice because "else if" is not used...

4CVSS0.00466EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/15 12:00 a.m.•4 views

CVE-2025-32996: Always-Incorrect Control Flow Implementation

In http-proxy-middleware before 2.0.8 and 3.x before 3.0.4, writeBody can be called twice because "else if" is not used...

5.3CVSS5.5AI score0.00466EPSS
SaveExploits0References1
Rows per page
Query Builder