Skip to content

Commit 9095fad

Browse files
renovate[bot]Tobbe
andauthored
fix(deps): update dependency http-proxy-middleware to v3.0.5 [security] (#61)
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [http-proxy-middleware](https://redirect.github.com/chimurai/http-proxy-middleware) | [`3.0.3` -> `3.0.5`](https://renovatebot.com/diffs/npm/http-proxy-middleware/3.0.3/3.0.5) | [![age](https://developer.mend.io/api/mc/badges/age/npm/http-proxy-middleware/3.0.5?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/http-proxy-middleware/3.0.5?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/http-proxy-middleware/3.0.3/3.0.5?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/http-proxy-middleware/3.0.3/3.0.5?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. ### GitHub Vulnerability Alerts #### [CVE-2025-32996](https://nvd.nist.gov/vuln/detail/CVE-2025-32996) In http-proxy-middleware before 2.0.8 and 3.x before 3.0.4, writeBody can be called twice because "else if" is not used. #### [CVE-2025-32997](https://nvd.nist.gov/vuln/detail/CVE-2025-32997) In http-proxy-middleware before 2.0.9 and 3.x before 3.0.5, fixRequestBody proceeds even if bodyParser has failed. --- ### Release Notes <details> <summary>chimurai/http-proxy-middleware (http-proxy-middleware)</summary> ### [`v3.0.5`](https://redirect.github.com/chimurai/http-proxy-middleware/blob/HEAD/CHANGELOG.md#v305) [Compare Source](https://redirect.github.com/chimurai/http-proxy-middleware/compare/v3.0.4...v3.0.5) - fix(fixRequestBody): check readableLength ([#&#8203;1096](https://redirect.github.com/chimurai/http-proxy-middleware/pull/1096)) ### [`v3.0.4`](https://redirect.github.com/chimurai/http-proxy-middleware/blob/HEAD/CHANGELOG.md#v304) [Compare Source](https://redirect.github.com/chimurai/http-proxy-middleware/compare/v3.0.3...v3.0.4) - fix(fixRequestBody): handle invalid request ([#&#8203;1092](https://redirect.github.com/chimurai/http-proxy-middleware/pull/1092)) - fix(fixRequestBody): prevent multiple .write() calls ([#&#8203;1089](https://redirect.github.com/chimurai/http-proxy-middleware/pull/1089)) - fix(websocket): handle errors in handleUpgrade ([#&#8203;823](https://redirect.github.com/chimurai/http-proxy-middleware/pull/823)) - ci(package): patch http-proxy ([#&#8203;1084](https://redirect.github.com/chimurai/http-proxy-middleware/pull/1084)) - fix(fixRequestBody): support multipart/form-data ([#&#8203;896](https://redirect.github.com/chimurai/http-proxy-middleware/pull/896)) - feat(types): export Plugin type ([#&#8203;1071](https://redirect.github.com/chimurai/http-proxy-middleware/pull/1071)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/redmix-run/redmix). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Tobbe Lundberg <[email protected]>
1 parent e30d5fd commit 9095fad

File tree

2 files changed

+6
-6
lines changed

2 files changed

+6
-6
lines changed

packages/vite/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -80,7 +80,7 @@
8080
"express": "4.21.2",
8181
"find-my-way": "8.2.2",
8282
"fs-extra": "11.2.0",
83-
"http-proxy-middleware": "3.0.3",
83+
"http-proxy-middleware": "3.0.5",
8484
"isbot": "5.1.21",
8585
"react": "19.0.0-rc-f2df5694-20240916",
8686
"react-server-dom-webpack": "19.0.0-rc-f2df5694-20240916",

yarn.lock

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -8897,7 +8897,7 @@ __metadata:
88978897
find-my-way: "npm:8.2.2"
88988898
fs-extra: "npm:11.2.0"
88998899
glob: "npm:11.0.0"
8900-
http-proxy-middleware: "npm:3.0.3"
8900+
http-proxy-middleware: "npm:3.0.5"
89018901
isbot: "npm:5.1.21"
89028902
memfs: "npm:4.17.0"
89038903
publint: "npm:0.3.11"
@@ -19093,17 +19093,17 @@ __metadata:
1909319093
languageName: node
1909419094
linkType: hard
1909519095

19096-
"http-proxy-middleware@npm:3.0.3":
19097-
version: 3.0.3
19098-
resolution: "http-proxy-middleware@npm:3.0.3"
19096+
"http-proxy-middleware@npm:3.0.5":
19097+
version: 3.0.5
19098+
resolution: "http-proxy-middleware@npm:3.0.5"
1909919099
dependencies:
1910019100
"@types/http-proxy": "npm:^1.17.15"
1910119101
debug: "npm:^4.3.6"
1910219102
http-proxy: "npm:^1.18.1"
1910319103
is-glob: "npm:^4.0.3"
1910419104
is-plain-object: "npm:^5.0.0"
1910519105
micromatch: "npm:^4.0.8"
19106-
checksum: 10c0/c4d68a10d8d42f02e59f7dc8249c98d1ac03aecee177b42c2d8b6a0cb6b71c6688e759e5387f4cdb570150070ca1c6808b38010cbdf67f4500a2e75671a36e05
19106+
checksum: 10c0/89ff3c8fe65b22b8042a6173ae1b8f77c5171f7eecf3c8b5d6dcffe3c9d688acae7bcf498cc08d1525f566dc0781efaec4e2ddc49224b1f16f020de7987a446b
1910719107
languageName: node
1910819108
linkType: hard
1910919109

0 commit comments

Comments
 (0)