In http-proxy-middleware before 2.0.8 and 3.x before 3.0.4, writeBody can be called twice because else if is not used.
Weakness
The code contains a control flow path that does not reflect the algorithm that the path is intended to implement, leading to incorrect behavior any time this path is navigated.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Http-proxy-middleware | Chimurai | * | 2.0.8 (excluding) |
| Http-proxy-middleware | Chimurai | 3.0.0 (including) | 3.0.4 (excluding) |
| Red Hat Developer Hub 1.6 | RedHat | rhdh/rhdh-hub-rhel9:sha256:79618b38d6f02457954b227d538e238fdebbb72a220af5bd6be3cfab3ad0f262 | * |
| Red Hat Developer Hub 1.7 | RedHat | rhdh/rhdh-hub-rhel9:sha256:aa3c5b50c65aee51b932fafcbf479ce54f15496cffc2744860bd9e135cce815c | * |