The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The parse function in llhttp < 2.1.4 and < 6.0.6. ignores chunk extensions when parsing the body of chunked requests. This leads to HTTP Request Smuggling (HRS) under certain conditions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-packagingUpgrade nodejs-develUpgrade nodejsUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade npmUpgrade nodejs-full-i18n | May 4, 2022 | Nov 3, 2021 |
| Alpine Linux | — | Upgrade nodejsUpgrade nodejs-current | Mar 26, 2024 | Nov 3, 2021 |
| Amazon_linux_2023 | — | Upgrade v8-develUpgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-debugsourceUpgrade nodejs-libsUpgrade nodejs-docsUpgrade npmUpgrade nodejs-develUpgrade nodejs-debuginfoUpgrade nodejs-libs-debuginfo | Feb 17, 2025 | Oct 12, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 3, 2021 |
| Centos_linux | — | Upgrade nodejs-debugsourceUpgrade nodejs-packagingUpgrade nodejsUpgrade nodejs-docsUpgrade nodejs-full-i18nUpgrade nodejs-nodemonUpgrade nodejs-develUpgrade nodejs-debuginfoUpgrade npm | Dec 17, 2021 | Nov 3, 2021 |
| Debian | — | Upgrade nodejs | Nov 4, 2022 | Nov 3, 2021 |
| Freebsd | — | Upgrade node14Upgrade node | Nov 4, 2022 | Oct 14, 2021 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | May 10, 2024 | Nov 3, 2021 |
| Oracle Solaris | — | Upgrade runtime/nodejs to version 16.11.1-11.4.39.0.1.107.2 on Solaris 11.4Upgrade runtime/nodejs/nodejs-12 to version 12.22.7-11.4.39.0.1.107.2 on Solaris 11.4Upgrade runtime/nodejs/nodejs-16 to version 16.11.1-11.4.39.0.1.107.2 on Solaris 11.4Upgrade runtime/nodejs/nodejs-14 to version 14.18.1-11.4.39.0.1.107.2 on Solaris 11.4 | Nov 17, 2021 | Nov 17, 2021 |
| Oracle_linux | — | Upgrade nodejsUpgrade npmUpgrade nodejs-packagingUpgrade nodejs-full-i18nUpgrade nodejs-develUpgrade nodejs-nodemonUpgrade nodejs-docs | Dec 17, 2021 | Oct 12, 2021 |
| Redhat_linux | — | Upgrade nodejs-docsUpgrade nodejs-packagingUpgrade nodejs-debugsourceUpgrade nodejs-debuginfoUpgrade nodejs-nodemonUpgrade npmUpgrade nodejs-full-i18nUpgrade nodejs-develUpgrade nodejs | Dec 17, 2021 | Nov 3, 2021 |
| Rocky_linux | — | Upgrade nodejs-develUpgrade nodejs-debugsourceUpgrade npmUpgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-debuginfo | Mar 5, 2024 | Nov 3, 2021 |
| Suse | — | Upgrade nodejs14Upgrade nodejs12-docsUpgrade nodejs10Upgrade nodejs14-docsUpgrade npm12Upgrade nodejs12Upgrade npm10Upgrade nodejs14-develUpgrade nodejs10-docsUpgrade nodejs10-develUpgrade nodejs12-develUpgrade npm14 | Dec 7, 2021 | Nov 3, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub