Node.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allow remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nodejs | Aug 30, 2017 | Apr 7, 2016 |
| Debian | — | Upgrade nodejs | Jul 30, 2024 | Apr 7, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 23, 2016 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | Oct 30, 2017 | Apr 7, 2016 |
| Suse | — | Upgrade firefox-gtk3-immodule-thaiUpgrade firefox-gtk3-immodule-ximUpgrade firefox-gtk3-toolsUpgrade firefox-gtk3-langUpgrade firefox-gtk3-immodules-tigrignaUpgrade libsoftokn3Upgrade firefox-gtk3-immodule-amharicUpgrade mozilla-nss-certsUpgrade mozilla-nss-toolsUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-libatk-1_0-0Upgrade nodejs8-docsUpgrade mozillafirefox-translations-commonUpgrade firefox-gtk3-immodule-vietnameseUpgrade mozillafirefox-translations-otherUpgrade firefox-gtk3-immodule-multipressUpgrade mozilla-nss-32bitUpgrade firefox-glib2-langUpgrade firefox-libharfbuzz0Upgrade mozilla-nss-develUpgrade firefox-libcairo2Upgrade mozilla-nspr-32bitUpgrade firefox-atk-langUpgrade firefox-gdk-pixbuf-query-loadersUpgrade libfirefox-glib-2_0-0Upgrade nodejs8Upgrade libfirefox-gobject-2_0-0Upgrade mozilla-nsprUpgrade firefox-libffi7Upgrade firefox-libpango-1_0-0Upgrade mozilla-nspr-develUpgrade npm8Upgrade firefox-gio-branding-upstreamUpgrade libfirefox-gthread-2_0-0Upgrade mozilla-nss-certs-32bitUpgrade mozillafirefox-branding-sledUpgrade mozilla-nssUpgrade firefox-gtk3-immodule-inuktitutUpgrade libsoftokn3-32bitUpgrade firefox-libgtk-3-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-libffi4Upgrade firefox-gtk3-dataUpgrade mozillafirefoxUpgrade libfirefox-gmodule-2_0-0Upgrade libfirefox-gio-2_0-0Upgrade libfreebl3-32bitUpgrade firefox-gdk-pixbuf-langUpgrade firefox-libcairo-gobject2Upgrade firefox-gtk3-branding-upstreamUpgrade firefox-glib2-toolsUpgrade nodejs8-develUpgrade libfreebl3 | Apr 7, 2016 | Apr 7, 2016 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Apr 7, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub