/
DirectorySecurity Advisories
Sign In
Security Advisories

CVE-2022-35256

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2022-35256

CGA ID

CGA-7866-9535-fcq4

Severity

6.5

Medium

CVSS V3

Description

The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that are not terminated with CLRF. This may result in HTTP Request Smuggling.

References

Affected packages


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images