Search for packages
| purl | pkg:npm/llhttp@6.0.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-eqfm-yp6y-aaab
Aliases: CVE-2022-32215 |
The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding headers. This can lead to HTTP Request Smuggling (HRS). |
Affected by 0 other vulnerabilities. |
|
VCID-n845-7aw9-aaaf
Aliases: CVE-2022-32214 GHSA-q5vx-44v4-gch4 |
The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling (HRS). |
Affected by 0 other vulnerabilities. |
|
VCID-q7sm-w668-aaaj
Aliases: CVE-2022-32213 GHSA-5689-v88g-g6rv |
The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly parse and validate Transfer-Encoding headers and can lead to HTTP Request Smuggling (HRS). |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-01-16T23:28:30.680328+00:00 | GitLab Importer | Affected by | VCID-eqfm-yp6y-aaab | None | 35.1.0 |
| 2025-01-16T23:28:30.644704+00:00 | GitLab Importer | Affected by | VCID-n845-7aw9-aaaf | None | 35.1.0 |
| 2025-01-16T23:28:30.604199+00:00 | GitLab Importer | Affected by | VCID-q7sm-w668-aaaj | None | 35.1.0 |
| 2024-09-17T22:43:50.153977+00:00 | GitLab Importer | Affected by | VCID-q7sm-w668-aaaj | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/llhttp/CVE-2022-32213.yml | 34.0.1 |
| 2024-09-17T22:43:50.128289+00:00 | GitLab Importer | Affected by | VCID-n845-7aw9-aaaf | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/llhttp/CVE-2022-32214.yml | 34.0.1 |
| 2024-01-03T18:05:38.493173+00:00 | GitLab Importer | Affected by | VCID-q7sm-w668-aaaj | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/llhttp/CVE-2022-32213.yml | 34.0.0rc1 |
| 2024-01-03T18:05:38.462781+00:00 | GitLab Importer | Affected by | VCID-n845-7aw9-aaaf | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/llhttp/CVE-2022-32214.yml | 34.0.0rc1 |