Search for packages
Package details: pkg:alpm/archlinux/nodejs@16.11.1-1
purl pkg:alpm/archlinux/nodejs@16.11.1-1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-ja9y-54rf-aaab The parser in accepts requests with a space (SP) right after the header name before the colon. This can lead to HTTP Request Smuggling (HRS) in llhttp < v2.1.4 and < v6.0.6. CVE-2021-22959
VCID-y6yq-qtna-aaaa The parse function in llhttp < 2.1.4 and < 6.0.6. ignores chunk extensions when parsing the body of chunked requests. This leads to HTTP Request Smuggling (HRS) under certain conditions. CVE-2021-22960

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:46:27.568676+00:00 Arch Linux Importer Fixing VCID-ja9y-54rf-aaab https://security.archlinux.org/AVG-2460 36.0.0
2025-03-28T07:46:27.548041+00:00 Arch Linux Importer Fixing VCID-y6yq-qtna-aaaa https://security.archlinux.org/AVG-2460 36.0.0
2024-10-20T01:39:38.655127+00:00 Arch Linux Importer Fixing VCID-ja9y-54rf-aaab https://security.archlinux.org/AVG-2460 34.0.2
2024-10-20T01:39:38.632528+00:00 Arch Linux Importer Fixing VCID-y6yq-qtna-aaaa https://security.archlinux.org/AVG-2460 34.0.2
2024-09-18T02:01:44.101008+00:00 Arch Linux Importer Fixing VCID-ja9y-54rf-aaab https://security.archlinux.org/AVG-2460 34.0.1
2024-09-18T02:01:44.075791+00:00 Arch Linux Importer Fixing VCID-y6yq-qtna-aaaa https://security.archlinux.org/AVG-2460 34.0.1
2024-05-04T17:12:01.457456+00:00 Arch Linux Importer Fixing VCID-ja9y-54rf-aaab https://security.archlinux.org/AVG-2460 34.0.0rc4
2024-05-04T17:12:01.435218+00:00 Arch Linux Importer Fixing VCID-y6yq-qtna-aaaa https://security.archlinux.org/AVG-2460 34.0.0rc4
2024-01-03T22:27:49.701645+00:00 Arch Linux Importer Fixing VCID-ja9y-54rf-aaab https://security.archlinux.org/AVG-2460 34.0.0rc1
2024-01-03T22:27:49.677587+00:00 Arch Linux Importer Fixing VCID-y6yq-qtna-aaaa https://security.archlinux.org/AVG-2460 34.0.0rc1