Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apk/alpine/nodejs-current@18.6.0-r0?arch=aarch64&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/nodejs-current@18.6.0-r0?arch=aarch64&distroversion=v3.18&reponame=community
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (3)
Vulnerability Summary Aliases
VCID-7tpb-9zrz-e7e1 Multiple vulnerabilities have been discovered in Node.js. CVE-2022-32212
VCID-8c4g-fjsa-nkhw llhttp allows HTTP Request Smuggling via Improper Delimiting of Header Fields The llhttp parser in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests. The LF character (without CR) is sufficient to delimit HTTP header fields in the lihttp parser. According to RFC7230 section 3, only the CRLF sequence should delimit each header-field. This can lead to HTTP Request Smuggling (HRS). CVE-2022-32214
GHSA-q5vx-44v4-gch4
VCID-v3uy-dqn9-qye5 Multiple vulnerabilities have been discovered in Node.js. CVE-2022-32222

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-03T17:57:47.412161+00:00 Alpine Linux Importer Fixing VCID-7tpb-9zrz-e7e1 https://secdb.alpinelinux.org/v3.18/community.json 38.1.0
2026-04-01T19:28:16.552007+00:00 Alpine Linux Importer Fixing VCID-v3uy-dqn9-qye5 https://secdb.alpinelinux.org/v3.18/community.json 38.0.0
2026-04-01T19:10:58.038456+00:00 Alpine Linux Importer Fixing VCID-8c4g-fjsa-nkhw https://secdb.alpinelinux.org/v3.18/community.json 38.0.0