Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apk/alpine/nodejs@14.20.1-r0?arch=s390x&distroversion=v3.13&reponame=main
purl pkg:apk/alpine/nodejs@14.20.1-r0?arch=s390x&distroversion=v3.13&reponame=main
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (4)
Vulnerability Summary Aliases
VCID-8c4g-fjsa-nkhw llhttp allows HTTP Request Smuggling via Improper Delimiting of Header Fields The llhttp parser in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests. The LF character (without CR) is sufficient to delimit HTTP header fields in the lihttp parser. According to RFC7230 section 3, only the CRLF sequence should delimit each header-field. This can lead to HTTP Request Smuggling (HRS). CVE-2022-32214
GHSA-q5vx-44v4-gch4
VCID-b54b-pd2b-bygm llhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding The llhttp parser in the http module in Node.js v17.x does not correctly parse and validate Transfer-Encoding headers and can lead to HTTP Request Smuggling (HRS). Impacts: - All versions of the nodejs 18.x, 16.x, and 14.x releases lines. - llhttp v6.0.7 and llhttp v2.1.5 contains the fixes that were updated inside Node.js CVE-2022-32213
GHSA-5689-v88g-g6rv
VCID-dfdy-vhdd-5kh4 Multiple vulnerabilities have been discovered in Node.js. CVE-2022-35256
VCID-wzcw-dd7m-zkaz Multiple vulnerabilities have been discovered in Node.js. CVE-2022-32215

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-08T06:23:18.066775+00:00 Alpine Linux Importer Fixing VCID-8c4g-fjsa-nkhw https://secdb.alpinelinux.org/v3.13/main.json 38.1.0
2026-04-07T13:58:18.699189+00:00 Alpine Linux Importer Fixing VCID-b54b-pd2b-bygm https://secdb.alpinelinux.org/v3.13/main.json 38.1.0
2026-04-06T04:52:31.266682+00:00 Alpine Linux Importer Fixing VCID-dfdy-vhdd-5kh4 https://secdb.alpinelinux.org/v3.13/main.json 38.1.0
2026-04-03T17:44:40.491024+00:00 Alpine Linux Importer Fixing VCID-wzcw-dd7m-zkaz https://secdb.alpinelinux.org/v3.13/main.json 38.1.0