Search for packages
Package details: pkg:alpm/archlinux/nodejs@16.11.0-1
purl pkg:alpm/archlinux/nodejs@16.11.0-1
Next non-vulnerable version 16.11.1-1
Latest non-vulnerable version 23.11.1-1
Risk 3.1
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-ja9y-54rf-aaab
Aliases:
CVE-2021-22959
The parser in accepts requests with a space (SP) right after the header name before the colon. This can lead to HTTP Request Smuggling (HRS) in llhttp < v2.1.4 and < v6.0.6.
16.11.1-1
Affected by 0 other vulnerabilities.
VCID-y6yq-qtna-aaaa
Aliases:
CVE-2021-22960
The parse function in llhttp < 2.1.4 and < 6.0.6. ignores chunk extensions when parsing the body of chunked requests. This leads to HTTP Request Smuggling (HRS) under certain conditions.
16.11.1-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:46:27.563764+00:00 Arch Linux Importer Affected by VCID-ja9y-54rf-aaab https://security.archlinux.org/AVG-2460 36.0.0
2025-03-28T07:46:27.543120+00:00 Arch Linux Importer Affected by VCID-y6yq-qtna-aaaa https://security.archlinux.org/AVG-2460 36.0.0
2024-10-20T01:39:38.650332+00:00 Arch Linux Importer Affected by VCID-ja9y-54rf-aaab https://security.archlinux.org/AVG-2460 34.0.2
2024-10-20T01:39:38.626362+00:00 Arch Linux Importer Affected by VCID-y6yq-qtna-aaaa https://security.archlinux.org/AVG-2460 34.0.2
2024-09-18T02:01:44.096087+00:00 Arch Linux Importer Affected by VCID-ja9y-54rf-aaab https://security.archlinux.org/AVG-2460 34.0.1
2024-09-18T02:01:44.070580+00:00 Arch Linux Importer Affected by VCID-y6yq-qtna-aaaa https://security.archlinux.org/AVG-2460 34.0.1
2024-05-04T17:12:01.452756+00:00 Arch Linux Importer Affected by VCID-ja9y-54rf-aaab https://security.archlinux.org/AVG-2460 34.0.0rc4
2024-05-04T17:12:01.430374+00:00 Arch Linux Importer Affected by VCID-y6yq-qtna-aaaa https://security.archlinux.org/AVG-2460 34.0.0rc4
2024-01-03T22:27:49.696944+00:00 Arch Linux Importer Affected by VCID-ja9y-54rf-aaab https://security.archlinux.org/AVG-2460 34.0.0rc1
2024-01-03T22:27:49.672880+00:00 Arch Linux Importer Affected by VCID-y6yq-qtna-aaaa https://security.archlinux.org/AVG-2460 34.0.0rc1