Search for packages
| purl | pkg:apk/alpine/nodejs-current@18.9.1-r0?arch=riscv64&distroversion=v3.22&reponame=community |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-b54b-pd2b-bygm | llhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding The llhttp parser in the http module in Node.js v17.x does not correctly parse and validate Transfer-Encoding headers and can lead to HTTP Request Smuggling (HRS). Impacts: - All versions of the nodejs 18.x, 16.x, and 14.x releases lines. - llhttp v6.0.7 and llhttp v2.1.5 contains the fixes that were updated inside Node.js |
CVE-2022-32213
GHSA-5689-v88g-g6rv |
| VCID-dfdy-vhdd-5kh4 | Multiple vulnerabilities have been discovered in Node.js. |
CVE-2022-35256
|
| VCID-v3uy-dqn9-qye5 | Multiple vulnerabilities have been discovered in Node.js. |
CVE-2022-32222
|
| VCID-wzcw-dd7m-zkaz | Multiple vulnerabilities have been discovered in Node.js. |
CVE-2022-32215
|
| VCID-xnzh-wpd4-63f9 | Multiple vulnerabilities have been discovered in Node.js. |
CVE-2022-35255
|
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-03T17:52:17.069218+00:00 | Alpine Linux Importer | Fixing | VCID-b54b-pd2b-bygm | https://secdb.alpinelinux.org/v3.22/community.json | 38.1.0 |
| 2026-04-03T17:51:05.533079+00:00 | Alpine Linux Importer | Fixing | VCID-wzcw-dd7m-zkaz | https://secdb.alpinelinux.org/v3.22/community.json | 38.1.0 |
| 2026-04-01T19:27:58.266726+00:00 | Alpine Linux Importer | Fixing | VCID-v3uy-dqn9-qye5 | https://secdb.alpinelinux.org/v3.22/community.json | 38.0.0 |
| 2026-04-01T19:25:35.318850+00:00 | Alpine Linux Importer | Fixing | VCID-xnzh-wpd4-63f9 | https://secdb.alpinelinux.org/v3.22/community.json | 38.0.0 |
| 2026-04-01T19:12:14.275791+00:00 | Alpine Linux Importer | Fixing | VCID-dfdy-vhdd-5kh4 | https://secdb.alpinelinux.org/v3.22/community.json | 38.0.0 |