Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 7

Количество 7

github логотип

GHSA-76c9-3jph-rj3q

около 1 года назад

on-headers is vulnerable to http response header manipulation

CVSS3: 3.4
EPSS: Низкий
ubuntu логотип

CVE-2025-7339

около 1 года назад

on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions `<1.1.0` may result in response headers being inadvertently modified when an array is passed to `response.writeHead()`. Users should upgrade to version 1.1.0 to receive a patch. Uses are strongly encouraged to upgrade to `1.1.0`, but this issue can be worked around by passing an object to `response.writeHead()` rather than an array.

CVSS3: 3.4
EPSS: Низкий
redhat логотип

CVE-2025-7339

около 1 года назад

on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions `<1.1.0` may result in response headers being inadvertently modified when an array is passed to `response.writeHead()`. Users should upgrade to version 1.1.0 to receive a patch. Uses are strongly encouraged to upgrade to `1.1.0`, but this issue can be worked around by passing an object to `response.writeHead()` rather than an array.

CVSS3: 3.4
EPSS: Низкий
nvd логотип

CVE-2025-7339

около 1 года назад

on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions `<1.1.0` may result in response headers being inadvertently modified when an array is passed to `response.writeHead()`. Users should upgrade to version 1.1.0 to receive a patch. Uses are strongly encouraged to upgrade to `1.1.0`, but this issue can be worked around by passing an object to `response.writeHead()` rather than an array.

CVSS3: 3.4
EPSS: Низкий
msrc логотип

CVE-2025-7339

11 месяцев назад

on-headers vulnerable to http response header manipulation

EPSS: Низкий
debian логотип

CVE-2025-7339

около 1 года назад

on-headers is a node.js middleware for listening to when a response wr ...

CVSS3: 3.4
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:20919-1

2 месяца назад

Security update for agama-web-ui

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-76c9-3jph-rj3q

on-headers is vulnerable to http response header manipulation

CVSS3: 3.4
0%
Низкий
около 1 года назад
ubuntu логотип
CVE-2025-7339

on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions `<1.1.0` may result in response headers being inadvertently modified when an array is passed to `response.writeHead()`. Users should upgrade to version 1.1.0 to receive a patch. Uses are strongly encouraged to upgrade to `1.1.0`, but this issue can be worked around by passing an object to `response.writeHead()` rather than an array.

CVSS3: 3.4
0%
Низкий
около 1 года назад
redhat логотип
CVE-2025-7339

on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions `<1.1.0` may result in response headers being inadvertently modified when an array is passed to `response.writeHead()`. Users should upgrade to version 1.1.0 to receive a patch. Uses are strongly encouraged to upgrade to `1.1.0`, but this issue can be worked around by passing an object to `response.writeHead()` rather than an array.

CVSS3: 3.4
0%
Низкий
около 1 года назад
nvd логотип
CVE-2025-7339

on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions `<1.1.0` may result in response headers being inadvertently modified when an array is passed to `response.writeHead()`. Users should upgrade to version 1.1.0 to receive a patch. Uses are strongly encouraged to upgrade to `1.1.0`, but this issue can be worked around by passing an object to `response.writeHead()` rather than an array.

CVSS3: 3.4
0%
Низкий
около 1 года назад
msrc логотип
CVE-2025-7339

on-headers vulnerable to http response header manipulation

0%
Низкий
11 месяцев назад
debian логотип
CVE-2025-7339

on-headers is a node.js middleware for listening to when a response wr ...

CVSS3: 3.4
0%
Низкий
около 1 года назад
suse-cvrf логотип
openSUSE-SU-2026:20919-1

Security update for agama-web-ui

2 месяца назад

Уязвимостей на страницу