A vulnerability labeled as critical has been found in chimurai http-proxy-middleware up to 3.0.6/4.1.0. The impacted element is the function
fixRequestBody of the component Upstream Backend. Such manipulation leads to crlf injection.
This vulnerability is referenced as CVE-2026-55603. It is possible to launch the attack remotely. No exploit is available.
The affected component should be upgraded.
