The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that are not terminated with CLRF. This may result in HTTP Request Smuggling.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-develUpgrade nodejs-libsUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejsUpgrade nodejs-packagingUpgrade nodejs-packaging-bundler | Oct 20, 2022 | Oct 18, 2022 |
| Alpine Linux | — | Upgrade nodejsUpgrade nodejs-current | Mar 26, 2024 | Dec 5, 2022 |
| Amazon_linux_2023 | — | Upgrade nodejs-full-i18nUpgrade nodejsUpgrade v8-develUpgrade npmUpgrade nodejs-libsUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs-libs-debuginfoUpgrade nodejs-debugsourceUpgrade nodejs-debuginfo | Feb 17, 2025 | Sep 23, 2022 |
| Centos_linux | — | Upgrade nodejs-packagingUpgrade nodejs-debugsourceUpgrade nodejs-full-i18nUpgrade nodejs-libsUpgrade nodejsUpgrade nodejs-libs-debuginfoUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs-packaging-bundlerUpgrade npmUpgrade nodejs-nodemonUpgrade nodejs-debuginfo | Oct 20, 2022 | Oct 17, 2022 |
| Debian | — | Upgrade nodejs | Jan 26, 2023 | Dec 5, 2022 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | May 10, 2024 | Dec 5, 2022 |
| Oracle_linux | — | Upgrade graalvm22-ce-11-python-develUpgrade nodejsUpgrade nodejs-docsUpgrade graalvm22-ce-11-rubyUpgrade graalvm22-ce-17-native-image-llvm-backendUpgrade graalvm22-ce-11-libpolyglotUpgrade graalvm22-ce-17-native-imageUpgrade graalvm22-ce-17-llvmUpgrade graalvm22-ce-17-python-develUpgrade graalvm22-ce-17-libpolyglotUpgrade nodejs-develUpgrade nodejs-packaging-bundlerUpgrade graalvm22-ce-17-espresso-llvmUpgrade graalvm22-ce-17-javascriptUpgrade graalvm22-ce-11-llvmUpgrade graalvm22-ce-11-wasmUpgrade graalvm22-ce-17-toolsUpgrade graalvm22-ce-17-wasmUpgrade graalvm22-ce-11-native-imageUpgrade graalvm22-ce-11-fastrUpgrade graalvm22-ce-17-develUpgrade graalvm22-ce-17-nodejs-develUpgrade nodejs-full-i18nUpgrade graalvm22-ce-11-nodejs-develUpgrade graalvm22-ce-11-polyglotUpgrade graalvm22-ce-11-nodejsUpgrade nodejs-packagingUpgrade graalvm22-ce-17-jdkUpgrade graalvm22-ce-17Upgrade graalvm22-ce-11-develUpgrade nodejs-libsUpgrade graalvm22-ce-11Upgrade graalvm22-ce-17-fastrUpgrade graalvm22-ce-17-espressoUpgrade graalvm22-ce-11-ruby-develUpgrade nodejs-nodemonUpgrade graalvm22-ce-17-nodejsUpgrade graalvm22-ce-11-llvm-toolchainUpgrade graalvm22-ce-11-espresso-llvmUpgrade graalvm22-ce-17-pythonUpgrade graalvm22-ce-17-ruby-develUpgrade graalvm22-ce-11-pythonUpgrade graalvm22-ce-17-llvm-toolchainUpgrade graalvm22-ce-11-javascriptUpgrade npmUpgrade graalvm22-ce-17-rubyUpgrade graalvm22-ce-17-polyglotUpgrade graalvm22-ce-11-native-image-llvm-backendUpgrade graalvm22-ce-11-jdkUpgrade graalvm22-ce-11-espressoUpgrade graalvm22-ce-11-tools | Oct 18, 2022 | Sep 23, 2022 |
| Redhat_linux | — | Upgrade nodejs-packaging-bundlerUpgrade nodejs-debugsourceUpgrade nodejs-debuginfoUpgrade npmUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs-libs-debuginfoUpgrade nodejs-full-i18nUpgrade nodejs-libsUpgrade nodejs | Oct 20, 2022 | Oct 17, 2022 |
| Rocky_linux | — | Upgrade nodejs-develUpgrade nodejs-libs-debuginfoUpgrade npmUpgrade nodejsUpgrade nodejs-debuginfoUpgrade nodejs-full-i18nUpgrade nodejs-debugsourceUpgrade nodejs-libs | Mar 12, 2024 | Dec 5, 2022 |
| Suse | — | Upgrade corepack16Upgrade corepack14Upgrade nodejs14-docsUpgrade nodejs10Upgrade npm12Upgrade npm18Upgrade nodejs12-docsUpgrade nodejs12Upgrade nodejs12-develUpgrade nodejs18-docsUpgrade corepack18Upgrade nodejs16-docsUpgrade nodejs10-docsUpgrade nodejs18-develUpgrade nodejs16-develUpgrade nodejs18Upgrade npm16Upgrade npm10Upgrade npm14Upgrade nodejs14-develUpgrade nodejs10-develUpgrade nodejs16Upgrade nodejs14 | Oct 26, 2022 | Oct 19, 2022 |
| Ubuntu | — | Upgrade nodejs (Ubuntu Pro)Upgrade nodejs-doc (Ubuntu Pro)Upgrade libnode64Upgrade nodejs-dev (Ubuntu Pro)Upgrade libnode72Upgrade libnode-devUpgrade nodejs-docUpgrade nodejs | Nov 22, 2023 | Dec 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Dec 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub