Skip to content
Heist/ feed
UnratedFix available

Node.js 16.11.1 (Current)

Type: patchSource: Node.js announcements1 source record

Node.js 16.11.1 addresses two HTTP request smuggling issues involving spaces in headers and parsing chunked request bodies.

Announced Group revision 1
Original source ↗

nodejs

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

CVE-2021-22959: HTTP Request Smuggling due to spaced in headers (Medium)

Node.js

Node.js 16.11.1 (Current)
Affected versions
Not stated in this extraction
Fixed versions
16.11.1
Node.js 16.11.1 (Current)
Prerequisites
Not stated in this extraction
Related CVEs
CVE-2021-22959
CVE-2021-22959: HTTP Request Smuggling due to spaced in headers (Medium)
CVE-2021-22960
CVE-2021-22960: HTTP Request Smuggling when parsing the body (Medium)

Publisher severity

No explicit severity was extracted.

Event
#36236 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement