llhttp llhttp 6.0.6 for Node.js

CPE Details

llhttp llhttp 6.0.6 for Node.js
llhttp
llhttp
6.0.6
2021-11-04
12h36 +00:00
2021-11-04
12h46 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:llhttp:llhttp:6.0.6:*:*:*:*:node.js:*:*

Informations

Vendor

llhttp

Product

llhttp

Version

6.0.6

Target Software

node.js

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2022-35256 2022-12-04 23h00 +00:00 The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that are not terminated with CLRF. This may result in HTTP Request Smuggling.
6.5
Medium
CVE-2022-32213 2022-07-13 22h00 +00:00 The llhttp parser
6.5
Medium
CVE-2022-32214 2022-07-13 22h00 +00:00 The llhttp parser
6.5
Medium