CVE-2026-55602

MEDIUM SEVERITY

Vulnerability Description

http-proxy-middleware `router` host+path substring matching allows Host-header-driven backend routing bypass

Published Date

June 18, 2026

Last Modified

June 18, 2026

Source

GitHub

Vendor

npm

Product

http-proxy-middleware