Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2025-7339

Опубликовано: 17 сент. 2025
Источник: msrc
CVSS3: 3.4
EPSS Низкий

Описание

on-headers vulnerable to http response header manipulation

EPSS

Процентиль: 0%
0.00006
Низкий

3.4 Low

CVSS3

Связанные уязвимости

CVSS3: 3.4
ubuntu
4 месяца назад

on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions `<1.1.0` may result in response headers being inadvertently modified when an array is passed to `response.writeHead()`. Users should upgrade to version 1.1.0 to receive a patch. Uses are strongly encouraged to upgrade to `1.1.0`, but this issue can be worked around by passing an object to `response.writeHead()` rather than an array.

CVSS3: 3.4
redhat
4 месяца назад

on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions `<1.1.0` may result in response headers being inadvertently modified when an array is passed to `response.writeHead()`. Users should upgrade to version 1.1.0 to receive a patch. Uses are strongly encouraged to upgrade to `1.1.0`, but this issue can be worked around by passing an object to `response.writeHead()` rather than an array.

CVSS3: 3.4
nvd
4 месяца назад

on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions `<1.1.0` may result in response headers being inadvertently modified when an array is passed to `response.writeHead()`. Users should upgrade to version 1.1.0 to receive a patch. Uses are strongly encouraged to upgrade to `1.1.0`, but this issue can be worked around by passing an object to `response.writeHead()` rather than an array.

CVSS3: 3.4
debian
4 месяца назад

on-headers is a node.js middleware for listening to when a response wr ...

CVSS3: 3.4
github
4 месяца назад

on-headers is vulnerable to http response header manipulation

EPSS

Процентиль: 0%
0.00006
Низкий

3.4 Low

CVSS3