The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The parser in accepts requests with a space (SP) right after the header name before the colon. This can lead to HTTP Request Smuggling (HRS) in llhttp < v2.1.4 and < v6.0.6.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-docsUpgrade nodejs-develUpgrade nodejsUpgrade nodejs-nodemonUpgrade npmUpgrade nodejs-full-i18nUpgrade nodejs-packaging | May 4, 2022 | Nov 15, 2021 |
| Alpine Linux | — | Upgrade nodejsUpgrade nodejs-current | Mar 26, 2024 | Nov 15, 2021 |
| Amazon_linux_2023 | — | Upgrade v8-develUpgrade nodejsUpgrade npmUpgrade nodejs-debugsourceUpgrade nodejs-debuginfoUpgrade nodejs-libsUpgrade nodejs-full-i18nUpgrade nodejs-libs-debuginfoUpgrade nodejs-docsUpgrade nodejs-devel | Feb 17, 2025 | Oct 12, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 15, 2021 |
| Centos_linux | — | Upgrade nodejs-packagingUpgrade nodejsUpgrade nodejs-debuginfoUpgrade npmUpgrade nodejs-debugsourceUpgrade nodejs-develUpgrade nodejs-full-i18nUpgrade nodejs-docsUpgrade nodejs-nodemon | Dec 17, 2021 | Nov 15, 2021 |
| Debian | — | Upgrade nodejs | Nov 4, 2022 | Nov 15, 2021 |
| Freebsd | — | Upgrade nodeUpgrade node14 | Nov 4, 2022 | Oct 14, 2021 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | May 10, 2024 | Nov 15, 2021 |
| Oracle Solaris | — | Upgrade runtime/nodejs/nodejs-16 to version 16.11.1-11.4.39.0.1.107.2 on Solaris 11.4Upgrade runtime/nodejs/nodejs-14 to version 14.18.1-11.4.39.0.1.107.2 on Solaris 11.4Upgrade runtime/nodejs to version 16.11.1-11.4.39.0.1.107.2 on Solaris 11.4Upgrade runtime/nodejs/nodejs-12 to version 12.22.7-11.4.39.0.1.107.2 on Solaris 11.4 | Nov 17, 2021 | Nov 17, 2021 |
| Oracle_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-develUpgrade nodejs-docsUpgrade nodejs-packagingUpgrade nodejs | Dec 17, 2021 | Oct 12, 2021 |
| Redhat_linux | — | Upgrade nodejs-debuginfoUpgrade nodejs-nodemonUpgrade npmUpgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade nodejsUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs-debugsource | Dec 17, 2021 | Nov 15, 2021 |
| Rocky_linux | — | Upgrade nodejs-debuginfoUpgrade nodejs-develUpgrade npmUpgrade nodejs-debugsourceUpgrade nodejsUpgrade nodejs-full-i18n | Mar 5, 2024 | Nov 15, 2021 |
| Suse | — | Upgrade nodejs12Upgrade npm14Upgrade nodejs14Upgrade npm10Upgrade nodejs14-develUpgrade nodejs10-develUpgrade nodejs10Upgrade nodejs12-docsUpgrade nodejs14-docsUpgrade npm12Upgrade nodejs10-docsUpgrade nodejs12-devel | Dec 7, 2021 | Nov 15, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub