CVE-2026-55603 | chimurai http-proxy-middleware up to 3.0.6/4.1.0 Upstream Backend fixRequestBody crlf injection (GHSA-gcq2-9pq2-cxqm)

June 23, 2026 Yanac

A vulnerability labeled as critical has been found in chimurai http-proxy-middleware up to 3.0.6/4.1.0. The impacted element is the function fixRequestBody of the component Upstream Backend. Such manipulation leads to crlf injection.

This vulnerability is referenced as CVE-2026-55603. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More