UnratedFix available
Node.js 12.22.7 (LTS)
Node.js 12.22.7 (LTS) addresses HTTP request smuggling issues involving spaces in headers and chunked request body parsing.
Announced Group revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
Node.js 12.22.7 (LTS) Notable changes CVE-2021-22959: HTTP Request Smuggling due to spaced in headers (Medium) The http parser accepts requests with a space (SP) right after the header name before the colon. This can lead to HTTP Request Smuggling (HRS).
Node.js
Node.js 12.22.7 (LTS)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 12.22.7
Node.js 12.22.7 (LTS)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2021-22959
CVE-2021-22959: HTTP Request Smuggling due to spaced in headers (Medium)
CVE-2021-22960CVE-2021-22960: HTTP Request Smuggling when parsing the body (Medium)
Publisher severity
No explicit severity was extracted.
- Event
- #35956 · Revision 1
- Added to Heist Feed
- Publisher date