Search for packages
| purl | pkg:rpm/redhat/nodejs@1:16.20.1-1?arch=el9_2 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-38k9-23j3-eqh7
Aliases: CVE-2023-30581 |
Multiple vulnerabilities have been discovered in Node.js. | There are no reported fixed by versions. |
|
VCID-e7u5-356v-jbg7
Aliases: CVE-2023-30590 |
Multiple vulnerabilities have been discovered in Node.js. | There are no reported fixed by versions. |
|
VCID-q75s-43sx-4kbg
Aliases: CVE-2023-30588 |
Multiple vulnerabilities have been discovered in Node.js. | There are no reported fixed by versions. |
|
VCID-zstw-3wmu-u3c8
Aliases: CVE-2023-30589 GHSA-cggh-pq45-6h9x |
llhttp vulnerable to HTTP request smuggling The llhttp parser in the http module in Node v20.2.0 does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling (HRS). The CR character (without LF) is sufficient to delimit HTTP header fields in the llhttp parser. According to RFC7230 section 3, only the CRLF sequence should delimit each header-field. This impacts all Node.js active versions: v16, v18, and, v20 | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T13:53:41.258896+00:00 | RedHat Importer | Affected by | VCID-e7u5-356v-jbg7 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-30590.json | 38.0.0 |
| 2026-04-01T13:53:41.201845+00:00 | RedHat Importer | Affected by | VCID-zstw-3wmu-u3c8 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-30589.json | 38.0.0 |
| 2026-04-01T13:53:41.144798+00:00 | RedHat Importer | Affected by | VCID-q75s-43sx-4kbg | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-30588.json | 38.0.0 |
| 2026-04-01T13:53:40.976049+00:00 | RedHat Importer | Affected by | VCID-38k9-23j3-eqh7 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-30581.json | 38.0.0 |