{"schema_version":"2","view":"grouped","data":[{"id":68529,"cve_ids":["CVE-2016-2086","CVE-2016-2216"],"payload":{"kind":"patch","title":"Node.js 4.3.0 (LTS)","summary":"Node.js 4.3.0 is an important security release. It changes HTTP header parsing to address request smuggling and response splitting, and updates OpenSSL and http-parser.","evidence":"This is an important security release.","products":[{"name":{"value":"Node.js","evidence":"Node.js 4.3.0 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"4.3.0","evidence":"Node.js 4.3.0 (LTS)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[{"cve":"CVE-2016-2086","product":"Node.js","evidence":"Node.js 4.3.0 (LTS) This is an important security release. For full details see /blog/vulnerability/february-2016-security-releases/ for details on patched vulnerabilities. Notable changes http: fix defects in HTTP header parsing for requests and responses that can allow request smuggling (CVE-2016-2086)"},{"cve":"CVE-2016-2216","product":"Node.js","evidence":"Node.js 4.3.0 (LTS) This is an important security release. For full details see /blog/vulnerability/february-2016-security-releases/ for details on patched vulnerabilities. Notable changes http: fix defects in HTTP header parsing for requests and responses that can allow request smuggling (CVE-2016-2086) or response splitting (CVE-2016-2216)."}],"related_cves":[{"value":"CVE-2016-2086","evidence":"that can allow request smuggling (CVE-2016-2086)"},{"value":"CVE-2016-2216","evidence":"or response splitting (CVE-2016-2216)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:cd58b48c-fb28-4624-af35-d824a6a712c5","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v4.3.0","advisory_id":"cd58b48c-fb28-4624-af35-d824a6a712c5","event_types":["patch"],"published_at":"2026-10-25T21:42:23.853036+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2016-02-09T17:32:54+00:00","detail_url":"/advisories/advisory%3Acd58b48c-fb28-4624-af35-d824a6a712c5","group":{"id":"advisory:cd58b48c-fb28-4624-af35-d824a6a712c5","revision":1,"primary_event_id":68899,"change":"published","superseded_by":[],"changed":{"id":68899,"cve_ids":["CVE-2016-2086","CVE-2016-2216"],"payload":{"kind":"patch","title":"Node.js 4.3.0 (LTS)","summary":"Node.js 4.3.0 is an important security release. It changes HTTP header parsing to address request smuggling and response splitting, and updates OpenSSL and http-parser.","evidence":"This is an important security release.","products":[{"name":{"value":"Node.js","evidence":"Node.js 4.3.0 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"4.3.0","evidence":"Node.js 4.3.0 (LTS)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[{"cve":"CVE-2016-2086","product":"Node.js","evidence":"Node.js 4.3.0 (LTS) This is an important security release. For full details see /blog/vulnerability/february-2016-security-releases/ for details on patched vulnerabilities. Notable changes http: fix defects in HTTP header parsing for requests and responses that can allow request smuggling (CVE-2016-2086)"},{"cve":"CVE-2016-2216","product":"Node.js","evidence":"Node.js 4.3.0 (LTS) This is an important security release. For full details see /blog/vulnerability/february-2016-security-releases/ for details on patched vulnerabilities. Notable changes http: fix defects in HTTP header parsing for requests and responses that can allow request smuggling (CVE-2016-2086) or response splitting (CVE-2016-2216)."}],"related_cves":[{"value":"CVE-2016-2086","evidence":"that can allow request smuggling (CVE-2016-2086)"},{"value":"CVE-2016-2216","evidence":"or response splitting (CVE-2016-2216)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:cd58b48c-fb28-4624-af35-d824a6a712c5","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v4.3.0","advisory_id":"cd58b48c-fb28-4624-af35-d824a6a712c5","event_types":["patch"],"published_at":"2026-10-25T21:42:23.853036+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2016-02-09T17:32:54+00:00","detail_url":"/events/68899"},"members":[{"id":68899,"cve_ids":["CVE-2016-2086","CVE-2016-2216"],"payload":{"kind":"patch","title":"Node.js 4.3.0 (LTS)","summary":"Node.js 4.3.0 is an important security release. It changes HTTP header parsing to address request smuggling and response splitting, and updates OpenSSL and http-parser.","evidence":"This is an important security release.","products":[{"name":{"value":"Node.js","evidence":"Node.js 4.3.0 (LTS)"},"prerequisites":[],"fixed_versions":[{"value":"4.3.0","evidence":"Node.js 4.3.0 (LTS)"}],"affected_versions":[]}],"severity":"unknown","fixed_cves":[{"cve":"CVE-2016-2086","product":"Node.js","evidence":"Node.js 4.3.0 (LTS) This is an important security release. For full details see /blog/vulnerability/february-2016-security-releases/ for details on patched vulnerabilities. Notable changes http: fix defects in HTTP header parsing for requests and responses that can allow request smuggling (CVE-2016-2086)"},{"cve":"CVE-2016-2216","product":"Node.js","evidence":"Node.js 4.3.0 (LTS) This is an important security release. For full details see /blog/vulnerability/february-2016-security-releases/ for details on patched vulnerabilities. Notable changes http: fix defects in HTTP header parsing for requests and responses that can allow request smuggling (CVE-2016-2086) or response splitting (CVE-2016-2216)."}],"related_cves":[{"value":"CVE-2016-2086","evidence":"that can allow request smuggling (CVE-2016-2086)"},{"value":"CVE-2016-2216","evidence":"or response splitting (CVE-2016-2216)"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:cd58b48c-fb28-4624-af35-d824a6a712c5","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/release/v4.3.0","advisory_id":"cd58b48c-fb28-4624-af35-d824a6a712c5","event_types":["patch"],"published_at":"2026-10-25T21:42:23.853036+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2016-02-09T17:32:54+00:00","detail_url":"/events/68899"}]}}],"next_after":68529,"next_before":68529}