Количество 31
Количество 31
CVE-2023-30589
The llhttp parser in the http module in Node v20.2.0 does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling (HRS). The CR character (without LF) is sufficient to delimit HTTP header fields in the llhttp parser. According to RFC7230 section 3, only the CRLF sequence should delimit each header-field. This impacts all Node.js active versions: v16, v18, and, v20
CVE-2023-30589
The llhttp parser in the http module in Node v20.2.0 does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling (HRS). The CR character (without LF) is sufficient to delimit HTTP header fields in the llhttp parser. According to RFC7230 section 3, only the CRLF sequence should delimit each header-field. This impacts all Node.js active versions: v16, v18, and, v20
CVE-2023-30589
The llhttp parser in the http module in Node v20.2.0 does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling (HRS). The CR character (without LF) is sufficient to delimit HTTP header fields in the llhttp parser. According to RFC7230 section 3, only the CRLF sequence should delimit each header-field. This impacts all Node.js active versions: v16, v18, and, v20
CVE-2023-30589
CVE-2023-30589
The llhttp parser in the http module in Node v20.2.0 does not strictly ...
GHSA-cggh-pq45-6h9x
llhttp vulnerable to HTTP request smuggling
BDU:2023-04893
Уязвимость программной платформы Node.js, связанная с недостатками обработки HTTP-запросов, позволяющая нарушителю выполнять атаку "контрабанда HTTP-запросов"
ELSA-2023-4537
ELSA-2023-4537: nodejs:16 security, bug fix, and enhancement update (MODERATE)
ELSA-2023-4536
ELSA-2023-4536: nodejs:18 security, bug fix, and enhancement update (MODERATE)
ELSA-2023-4331
ELSA-2023-4331: nodejs security, bug fix, and enhancement update (MODERATE)
ELSA-2023-4330
ELSA-2023-4330: 18 security, bug fix, and enhancement update (MODERATE)
ELSA-2023-12944
ELSA-2023-12944: GraalVM Security update (IMPORTANT)
ELSA-2023-12943
ELSA-2023-12943: GraalVM Security update (IMPORTANT)
ELSA-2023-12942
ELSA-2023-12942: GraalVM Security update (IMPORTANT)
ELSA-2023-12941
ELSA-2023-12941: GraalVM Security update (IMPORTANT)
ELSA-2023-12940
ELSA-2023-12940: GraalVM Security update (IMPORTANT)
ELSA-2023-12939
ELSA-2023-12939: GraalVM Security update (IMPORTANT)
ELSA-2023-12938
ELSA-2023-12938: GraalVM Security update (IMPORTANT)
ELSA-2023-12937
ELSA-2023-12937: GraalVM Security update (IMPORTANT)
ELSA-2023-12936
ELSA-2023-12936: GraalVM Security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-30589 The llhttp parser in the http module in Node v20.2.0 does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling (HRS). The CR character (without LF) is sufficient to delimit HTTP header fields in the llhttp parser. According to RFC7230 section 3, only the CRLF sequence should delimit each header-field. This impacts all Node.js active versions: v16, v18, and, v20 | CVSS3: 7.5 | 1% Низкий | почти 2 года назад |
 | CVE-2023-30589 The llhttp parser in the http module in Node v20.2.0 does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling (HRS). The CR character (without LF) is sufficient to delimit HTTP header fields in the llhttp parser. According to RFC7230 section 3, only the CRLF sequence should delimit each header-field. This impacts all Node.js active versions: v16, v18, and, v20 | CVSS3: 7.5 | 1% Низкий | почти 2 года назад |
 | CVE-2023-30589 The llhttp parser in the http module in Node v20.2.0 does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling (HRS). The CR character (without LF) is sufficient to delimit HTTP header fields in the llhttp parser. According to RFC7230 section 3, only the CRLF sequence should delimit each header-field. This impacts all Node.js active versions: v16, v18, and, v20 | CVSS3: 7.5 | 1% Низкий | почти 2 года назад |
 | CVSS3: 7.5 | 1% Низкий | почти 2 года назад | |
| CVE-2023-30589 The llhttp parser in the http module in Node v20.2.0 does not strictly ... | CVSS3: 7.5 | 1% Низкий | почти 2 года назад |
| GHSA-cggh-pq45-6h9x llhttp vulnerable to HTTP request smuggling | CVSS3: 7.5 | 1% Низкий | почти 2 года назад |
 | BDU:2023-04893 Уязвимость программной платформы Node.js, связанная с недостатками обработки HTTP-запросов, позволяющая нарушителю выполнять атаку "контрабанда HTTP-запросов" | CVSS3: 7.5 | 1% Низкий | почти 2 года назад |
| ELSA-2023-4537 ELSA-2023-4537: nodejs:16 security, bug fix, and enhancement update (MODERATE) | почти 2 года назад | ||
| ELSA-2023-4536 ELSA-2023-4536: nodejs:18 security, bug fix, and enhancement update (MODERATE) | почти 2 года назад | ||
| ELSA-2023-4331 ELSA-2023-4331: nodejs security, bug fix, and enhancement update (MODERATE) | почти 2 года назад | ||
| ELSA-2023-4330 ELSA-2023-4330: 18 security, bug fix, and enhancement update (MODERATE) | почти 2 года назад | ||
| ELSA-2023-12944 ELSA-2023-12944: GraalVM Security update (IMPORTANT) | больше 1 года назад | ||
| ELSA-2023-12943 ELSA-2023-12943: GraalVM Security update (IMPORTANT) | больше 1 года назад | ||
| ELSA-2023-12942 ELSA-2023-12942: GraalVM Security update (IMPORTANT) | больше 1 года назад | ||
| ELSA-2023-12941 ELSA-2023-12941: GraalVM Security update (IMPORTANT) | больше 1 года назад | ||
| ELSA-2023-12940 ELSA-2023-12940: GraalVM Security update (IMPORTANT) | больше 1 года назад | ||
| ELSA-2023-12939 ELSA-2023-12939: GraalVM Security update (IMPORTANT) | больше 1 года назад | ||
| ELSA-2023-12938 ELSA-2023-12938: GraalVM Security update (IMPORTANT) | больше 1 года назад | ||
| ELSA-2023-12937 ELSA-2023-12937: GraalVM Security update (IMPORTANT) | больше 1 года назад | ||
| ELSA-2023-12936 ELSA-2023-12936: GraalVM Security update (IMPORTANT) | больше 1 года назад |
Уязвимостей на страницу