# What changed in @fastify/http-proxy

> 5 changes in @fastify/http-proxy 11 from its official release notes, upgrade guides and advisories: 1 security. Each one cited. Sources checked 2026-10-21. HTML: https://unstale.sh/npm/@fastify/http-proxy/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## @fastify/http-proxy 11

### Security

- Fastify's connection header abuse enables stripping of proxy-added headers (11.4.4) — [security advisory](https://github.com/advisories/GHSA-GWHP-PF74-VJ37)

### Fixes and other changes

- Routes already registered by other plugins are skipped. (11.6.5) — [release notes](https://github.com/fastify/fastify-http-proxy/releases/tag/v11.6.5)
- @fastify/http-proxy now coexists with @fastify/websocket regardless of registration order. (11.6.4) — [release notes](https://github.com/fastify/fastify-http-proxy/releases/tag/v11.6.4)
- Encoded backslashes in proxy paths are normalized. (11.6.3) — [release notes](https://github.com/fastify/fastify-http-proxy/releases/tag/v11.6.3)
- The onDisconnect hook is called once per connection. (11.6.3) — [release notes](https://github.com/fastify/fastify-http-proxy/releases/tag/v11.6.3)