Search for packages
| purl | pkg:apk/alpine/nodejs-current@18.9.1-r0?arch=ppc64le&distroversion=v3.17&reponame=community |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-b54b-pd2b-bygm | llhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding The llhttp parser in the http module in Node.js v17.x does not correctly parse and validate Transfer-Encoding headers and can lead to HTTP Request Smuggling (HRS). Impacts: - All versions of the nodejs 18.x, 16.x, and 14.x releases lines. - llhttp v6.0.7 and llhttp v2.1.5 contains the fixes that were updated inside Node.js |
CVE-2022-32213
GHSA-5689-v88g-g6rv |
| VCID-dfdy-vhdd-5kh4 | Multiple vulnerabilities have been discovered in Node.js. |
CVE-2022-35256
|
| VCID-v3uy-dqn9-qye5 | Multiple vulnerabilities have been discovered in Node.js. |
CVE-2022-32222
|
| VCID-wzcw-dd7m-zkaz | Multiple vulnerabilities have been discovered in Node.js. |
CVE-2022-32215
|
| VCID-xnzh-wpd4-63f9 | Multiple vulnerabilities have been discovered in Node.js. |
CVE-2022-35255
|
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-06T04:49:18.283679+00:00 | Alpine Linux Importer | Fixing | VCID-xnzh-wpd4-63f9 | https://secdb.alpinelinux.org/v3.17/community.json | 38.1.0 |
| 2026-04-03T17:53:19.684885+00:00 | Alpine Linux Importer | Fixing | VCID-dfdy-vhdd-5kh4 | https://secdb.alpinelinux.org/v3.17/community.json | 38.1.0 |
| 2026-04-01T19:30:25.795245+00:00 | Alpine Linux Importer | Fixing | VCID-b54b-pd2b-bygm | https://secdb.alpinelinux.org/v3.17/community.json | 38.0.0 |
| 2026-04-01T19:17:12.247359+00:00 | Alpine Linux Importer | Fixing | VCID-v3uy-dqn9-qye5 | https://secdb.alpinelinux.org/v3.17/community.json | 38.0.0 |
| 2026-04-01T18:51:38.208710+00:00 | Alpine Linux Importer | Fixing | VCID-wzcw-dd7m-zkaz | https://secdb.alpinelinux.org/v3.17/community.json | 38.0.0 |