You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@angular-devkit/build-angular@19.2.8 requires http-proxy-middleware@3.0.3
@angular-devkit/build-angular@19.2.8 requires http-proxy-middleware@^2.0.7 via webpack-dev-server@5.2.0
No patched version available for http-proxy-middleware
The earliest fixed version is 3.0.5, which was published two weeks ago.
Minimal Reproduction
Use the latest Angular packages (build-angular 19.2.8 at the moment of writing) and check the package-lock.json.
Command
other
Is this a regression?
The previous version in which this bug was not present was
No response
Description
In http-proxy-middleware before 2.0.8 and 3.x before 3.0.4, writeBody can be called twice because "else if" is not used, see https://nvd.nist.gov/vuln/detail/CVE-2025-32996.
According to GitHub:
The earliest fixed version is 3.0.5, which was published two weeks ago.
Minimal Reproduction
Use the latest Angular packages (build-angular 19.2.8 at the moment of writing) and check the package-lock.json.
Exception or Error
Your Environment
Anything else relevant?
No response
The text was updated successfully, but these errors were encountered: