http-parser vulnerabilities (Mageia)
15 vulnerabilities.
-
http-parserMageia Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in... 6.5 Medium -
http-parserMageia HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer... 9.8 Critical -
http-parserMageia Keep-alive HTTP and HTTPS connections can remain open and inactive for up to 2 minutes in Node.js... 7.5 High -
http-parserMageia In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before... 7.5 High -
http-parserMageia Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in... 4.3 Medium -
http-parserMageia Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial... 7.5 High -
http-parserMageia Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with... 7.5 High -
http-parserMageia Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by... 8.1 High -
http-parserMageia Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can... 7.5 High -
http-parserMageia In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding ... 7.5 High -
http-parserMageia Calling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could... 7.5 High -
http-parserMageia Withdrawn Advisory: Node.js Inspector RCE via DNS Rebinding 8.8 High -
http-parserMageia The HTTP parser in all current versions of Node.js ignores spaces in the `Content-Length` header,... 5.3 Medium -
http-parserMageia The `'path'` module in the Node.js 4.x release line contains a potential regular expression... 7.5 High -
http-parserMageia The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could... 7.5 High