The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-packagingUpgrade nodejs-nodemon | May 4, 2022 | Feb 7, 2020 |
| Alpine Linux | — | Upgrade nodejs-currentUpgrade nodejs | Aug 22, 2024 | Feb 7, 2020 |
| Centos_linux | — | Upgrade nodejs-debugsourceUpgrade nodejs-devel-debuginfoUpgrade nodejs-packagingUpgrade nodejs-docsUpgrade nodejs-debuginfoUpgrade nodejsUpgrade nodejs-develUpgrade nodejs-nodemonUpgrade npm | Feb 26, 2020 | Feb 7, 2020 |
| Debian | — | Upgrade nodejs | May 1, 2020 | Feb 7, 2020 |
| Freebsd | — | Upgrade node12Upgrade node10Upgrade node | Mar 10, 2020 | Mar 9, 2020 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | Mar 23, 2020 | Feb 7, 2020 |
| Oracle Solaris | — | Upgrade runtime/nodejs/nodejs-10 to version 10.19.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/nodejs to version 10.19.0-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Feb 7, 2020 |
| Oracle_linux | — | Upgrade nodejsUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade npmUpgrade nodejs-docsUpgrade nodejs-devel | Mar 2, 2020 | Feb 7, 2020 |
| Redhat_linux | — | Upgrade nodejs-devel-debuginfoUpgrade nodejs-debugsourceUpgrade npmUpgrade nodejs-debuginfoUpgrade nodejs-develUpgrade nodejsUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-packaging | Feb 26, 2020 | Feb 7, 2020 |
| Rocky_linux | — | — | Aug 15, 2024 | Feb 7, 2020 |
| Suse | — | Upgrade nodejs12-docsUpgrade nodejs6-docsUpgrade nodejs8Upgrade npm8Upgrade nodejs10Upgrade nodejs8-develUpgrade nodejs6-develUpgrade npm12Upgrade nodejs12Upgrade npm6Upgrade nodejs8-docsUpgrade nodejs10-docsUpgrade npm10Upgrade nodejs6Upgrade nodejs10-develUpgrade nodejs12-devel | Mar 2, 2020 | Feb 7, 2020 |
| Ubuntu | — | Upgrade libnode-devUpgrade nodejsUpgrade nodejs-legacy (Ubuntu Pro)Upgrade libnode64Upgrade nodejs-dev (Ubuntu Pro)Upgrade nodejs (Ubuntu Pro) | Sep 20, 2023 | Feb 7, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 7, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub