NO
Product
Node.js
14
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 12Medium 2Low 0
Watch
Add Node.js to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-7159 | 5.3 | May 17 | The HTTP parser in all current versions of Node.js ignores spaces in the `Content-Length` header, allowing input such as `Content-Length: 1 2` to be interpreted as having a value… Affected: 4.x; 6.x; 8.x; 9.x |
| CVE-2018-12123 | 4.3 | Nov 28 | Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in URL parser for javascript protocol: If a Node.js application is using url.parse()… Affected: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0 |
Showing 2