LL
Vendor
Llhttp
6
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-35256 | LL Llhttp Llhttp | 6.5 | Dec 5 | The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that are not terminated with CLRF |
| CVE-2022-32215 | LL Llhttp Llhttp | 6.5 | Jul 14 | The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding headers |
| CVE-2022-32214 | LL Llhttp Llhttp | 6.5 | Jul 14 | The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests |
| CVE-2022-32213 | LL Llhttp Llhttp | 6.5 | Jul 14 | The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly parse and validate Transfer-Encoding headers and can lead to HTTP Request… |
| CVE-2021-22959 | LL Llhttp Llhttp | 6.5 | Nov 15 | The parser in accepts requests with a space (SP) right after the header name before the colon |
| CVE-2021-22960 | LL Llhttp Llhttp | 6.5 | Nov 3 | The parse function in llhttp < 2.1.4 and < 6.0.6 |