Search for packages
| purl | pkg:npm/llhttp@16.0.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-eqfm-yp6y-aaab
Aliases: CVE-2022-32215 |
The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding headers. This can lead to HTTP Request Smuggling (HRS). | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2024-09-17T22:43:50.238597+00:00 | GitLab Importer | Affected by | VCID-eqfm-yp6y-aaab | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/llhttp/CVE-2022-32215.yml | 34.0.1 |
| 2024-01-03T18:05:38.581067+00:00 | GitLab Importer | Affected by | VCID-eqfm-yp6y-aaab | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/llhttp/CVE-2022-32215.yml | 34.0.0rc1 |