Rob--W / cors-anywhere

CORS Anywhere is a NodeJS reverse proxy which adds CORS headers to the proxied request.
MIT License
8.5k stars 5.92k forks source link

Update HTTP-Proxy to 1.18.1 to resolve https://github.com/advisories/GHSA-6x33-pw7p-hmpq #453

Closed MyDevSystem closed 1 year ago

MyDevSystem commented 1 year ago

http-proxy has been updated to 1.18.1 to resolve DoS issue: https://www.npmjs.com/package/http-proxy

This dependency will need to be updated for cors-anywhere and pushed out to npm.

npm audit report

http-proxy <1.18.1 Severity: high Denial of Service in http-proxy - https://github.com/advisories/GHSA-6x33-pw7p-hmpq No fix available node_modules/http-proxy cors-anywhere * Depends on vulnerable versions of http-proxy node_modules/cors-anywhere

MyDevSystem commented 1 year ago

This is a duplicate