The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allows remote attackers to bypass an HTTP response-splitting protection mechanism via UTF-8 encoded Unicode characters in the HTTP header, as demonstrated by %c4%8d%c4%8a.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nodejs | Aug 30, 2017 | Apr 7, 2016 |
| Debian | — | Upgrade nodejs | Jul 30, 2024 | Apr 7, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 20, 2017 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | Oct 30, 2017 | Apr 7, 2016 |
| Suse | — | Upgrade firefox-gdk-pixbuf-query-loadersUpgrade nodejs8Upgrade firefox-glib2-toolsUpgrade firefox-gtk3-dataUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade libfirefox-gobject-2_0-0Upgrade firefox-gdk-pixbuf-langUpgrade firefox-libpango-1_0-0Upgrade libsoftokn3-32bitUpgrade nodejs8-docsUpgrade firefox-gio-branding-upstreamUpgrade mozilla-nssUpgrade libfirefox-gthread-2_0-0Upgrade firefox-gtk3-toolsUpgrade firefox-libffi4Upgrade npm8Upgrade firefox-libffi7Upgrade libfirefox-glib-2_0-0Upgrade MozillaFirefox-translations-commonUpgrade libfirefox-gmodule-2_0-0Upgrade nodejs8-develUpgrade mozilla-nss-certs-32bitUpgrade firefox-libcairo-gobject2Upgrade firefox-gtk3-langUpgrade libfreebl3-32bitUpgrade firefox-libcairo2Upgrade firefox-gtk3-immodule-amharicUpgrade firefox-atk-langUpgrade libfirefox-gio-2_0-0Upgrade firefox-gtk3-immodule-ximUpgrade firefox-libgtk-3-0Upgrade firefox-gtk3-immodule-vietnameseUpgrade MozillaFirefoxUpgrade mozilla-nss-certsUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-libatk-1_0-0Upgrade libfreebl3Upgrade firefox-gtk3-immodule-thaiUpgrade firefox-glib2-langUpgrade libsoftokn3Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-libharfbuzz0Upgrade firefox-gtk3-immodules-tigrignaUpgrade mozilla-nsprUpgrade firefox-gtk3-immodule-multipressUpgrade mozilla-nss-32bitUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-toolsUpgrade mozilla-nspr-develUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-gtk3-immodule-inuktitutUpgrade mozilla-nspr-32bitUpgrade mozilla-nss-devel | Apr 7, 2016 | Apr 7, 2016 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Apr 7, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub