[GH-ISSUE #9] npm audit high severity vulnerability #7

Closed
opened 2026-02-28 14:18:27 +03:00 by kerem · 1 comment
Owner

Originally created by @swan11jf on GitHub (May 15, 2020).
Original GitHub issue: https://github.com/AnanthVivekanand/spotify-adblock/issues/9

Denial of Service is shown as a high vulnerability

Originally created by @swan11jf on GitHub (May 15, 2020). Original GitHub issue: https://github.com/AnanthVivekanand/spotify-adblock/issues/9 Denial of Service is shown as a high vulnerability
kerem closed this issue 2026-02-28 14:18:28 +03:00
Author
Owner

@AnanthVivekanand commented on GitHub (May 15, 2020):

There's nothing that can be done about this right now since the issue is with http-proxy and affects all versions of it. We can't change anything on our side except change the proxy library, which is very time-consuming and isn't worth it right now.

Even then, the issue isn't very severe since most users will not be exposing the proxy to the outside world. Since most users will be using this on localhost or on their own closed network, no malicious actors should be able to actual perform a DoS (unless they happen to be on the network).

<!-- gh-comment-id:629401342 --> @AnanthVivekanand commented on GitHub (May 15, 2020): There's nothing that can be done about this right now since the issue is with `http-proxy` and affects **all** versions of it. We can't change anything on our side except change the proxy library, which is very time-consuming and isn't worth it right now. Even then, the issue isn't very severe since most users will not be exposing the proxy to the outside world. Since most users will be using this on localhost or on their own closed network, no malicious actors should be able to actual perform a DoS (unless they happen to be on the network).
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/spotify-adblock#7
No description provided.