Skip to content
Noroxi

chimurai records

5 published records for vendor chimurai.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
100%
Median publish → KEV
No record has entered KEV

Records by year

  1. 24
  2. 25
  3. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

5 records
  • CVE-2024-21536
    30Monitor

    Versions of the package http-proxy-middleware before 2.0.7, from 3.0.0 and before 3.0.3 are vulnerable to Denial of Service (DoS) due to an

    HighCVSS 7.7No exploitEPSS 1%

    chimurai · http-proxy-middlewareOct 19, 2024

  • CVE-2026-55603
    30Monitor

    http-proxy-middleware: multipart/form-data field injection via unescaped CRLF in `fixRequestBody`

    HighCVSS 7.5No exploitEPSS 0%

    chimurai · http-proxy-middlewareJun 22, 2026

  • CVE-2026-55602
    27Monitor

    http-proxy-middleware `router` host+path substring matching allows Host-header-driven backend routing bypass

    MediumCVSS 6.9No exploitEPSS 0%

    chimurai · http-proxy-middlewareJun 22, 2026

  • CVE-2025-32997
    21Monitor

    In http-proxy-middleware before 2.0.9 and 3.x before 3.0.5, fixRequestBody proceeds even if bodyParser has failed.

    MediumCVSS 5.3No exploitEPSS 0%

    chimurai · http-proxy-middlewareApr 14, 2025

  • CVE-2025-32996
    21Monitor

    In http-proxy-middleware before 2.0.8 and 3.x before 3.0.4, writeBody can be called twice because "else if" is not used.

    MediumCVSS 5.3No exploitEPSS 0%

    chimurai · http-proxy-middlewareApr 14, 2025