You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@couchdb.apache.org by "Antonio-Maranhao (via GitHub)" <gi...@apache.org> on 2025/04/24 13:24:13 UTC

[PR] fix: address CVEs in http-proxy-middleware [couchdb-fauxton]

Antonio-Maranhao opened a new pull request, #1478:
URL: https://github.com/apache/couchdb-fauxton/pull/1478

   ## Overview
   
   Address CVEs in http-proxy-middleware identified by `npm audit`
   
   ```
   http-proxy-middleware  <=2.0.8
   Severity: moderate
   http-proxy-middleware allows fixRequestBody to proceed even if bodyParser has failed - https://github.com/advisories/GHSA-9gqv-wp59-fq42
   http-proxy-middleware can call writeBody twice because "else if" is not used - https://github.com/advisories/GHSA-4www-5p9h-95mh
   ```
   
   ## Testing recommendations
   
   CI passes
   
   ## GitHub issue number
   
   n/a
   
   ## Related Pull Requests
   
   n/a
   
   ## Checklist
   
   - [x] Code is written and works correctly;
   - [x] Changes are covered by tests;
   - [ ] Documentation reflects the changes;
   - [ ] Update [rebar.config.script](https://github.com/apache/couchdb/blob/main/rebar.config.script) with the correct tag once a new Fauxton release is made
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@couchdb.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] fix: address CVEs in http-proxy-middleware [couchdb-fauxton]

Posted by "Antonio-Maranhao (via GitHub)" <gi...@apache.org>.
Antonio-Maranhao merged PR #1478:
URL: https://github.com/apache/couchdb-fauxton/pull/1478


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@couchdb.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org