Repository Issue Activity (beta)

#1721 Security: HTTP Request Smuggling via deleteLength (CL.TE) — upstream unfixed CVE-2026-29057

#1720 Security: CL.TE request smuggling in deleteLength (CVE-2026-29057 root cause, upstream unpatched)

#1719 util._extend() is depracatory

#1711 Is this library is dead?

#1715 Deprecation: replace util._extend usage with Object.assign (DEP0060)

#1565 tcp sockets never destroyed

#1708 WebSocket connection only fails when connecting to proxy

#1710 HTTP3 + QUIC support?

#1403 async handler for proxyReqWs

#1689 Making onProxyRes function asynchronous friendly

#1468 Crash on unsuccessful websocket request

#1706 When the client sends an authorization header basic auth is not applied

#1694 Cogent E Service Private

#1673 Gihub

#1696 The `util._extend` API is deprecated. Please use Object.assign() instead.

#886 option.xfwd - add header "X-Forwarded-Host"

#1687 Alternatives to http-proxy

#1570 Is websocket proxying working?

#1701 Improper Handling of Extra Parameters

#1478 proxyReq can't safely modify headers when used with keep alive (ERR_HTTP_HEADERS_SENT)

#1700 If the 'secure' option is set to 'false', does the proxy server created by httpProxy.createProxyServer still encrypt the routed HTTP message using SSL certificate, while not verifying the SSL Certs?

#1588 Is this project still active?

#1622 When i use the vite (bottom layer is node-http-proxy) to start a http-server and proxy the request to target server, ETIMEDOUT problem occurs frequently.

#1697 [help/advice] merging headers

#775 Removal of multiple slashes in url