【中文导读】Versions of the package http-proxy-middleware 存在拒绝服务风险(高危风险)。具体受影响版本、触发条件和修复方案以 NVD/厂商公告为准。 【原始描述】Versions of the package http-proxy-middleware before 2.0.7, from 3.0.0 and before 3.0.3 are vulnerable to Denial of Service (DoS) due to an UnhandledPromiseRejection error thrown by micromatch. An attacker could kill the Node.js process and crash the server by making requests to certain paths.