Skip to content
Llhttp vulnerabilities
Newest
-
llhttp, nodejs node, debian linux +2 more +4 more
The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that...
CVE-2022-35256
Fix available
6.5 Medium
-
llhttp, nodejs node, node.js +4 more +6 more
The llhttp parser in the http module in Node v17.6.0 does not correctly handle multi-line...
CVE-2022-32215
Fix available
EPSS 70.2%
6.5 Medium
-
llhttp, nodejs node, node.js +2 more +4 more
llhttp allows HTTP Request Smuggling via Improper Delimiting of Header Fields
CVE-2022-32214
Fix available
EPSS 81.8%
6.5 Medium
-
llhttp, nodejs node, node.js +4 more +6 more
llhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding
CVE-2022-32213
Fix available
EPSS 44.8%
6.5 Medium
-
llhttp, debian linux, nodejs node +1 more +3 more
The parser in accepts requests with a space (SP) right after the header name before the colon....
CVE-2021-22959
Fix available
6.5 Medium
-
llhttp, debian linux, nodejs node +1 more +3 more
The parse function in llhttp < 2.1.4 and < 6.0.6. ignores chunk extensions when parsing the body...
CVE-2021-22960
Fix available
6.5 Medium