The security policy can be found at https://github.com/expressjs/.github/blob/master/SECURITY.md
Security: jshttp/proxy-addr
Security
SECURITY.md
-
proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnetGHSA-jqcg-44mw-7w3h published
Sep 15, 2026 by UlisesGasconCritical
Learn more about advisories related to jshttp/proxy-addr in the GitHub Advisory Database