The vulnerability of the URL parser in the Node.js library allows a hacker to gain unauthorized access to protected data.

🗓️ 20 Aug 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

A vulnerability in the Node.js URL parser allows remote attackers to access protected data via hypertext transfer protocol.

Reporter	Title	Published	Views	Family All 109
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private - Node.js	11 Mar 201914:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Cloud App Management V2018	13 May 201923:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Rational Application Developer for WebSphere Software	29 Jan 201921:10	–	ibm
IBM Security Bulletins	Security Bulletin: API Connect is impacted by multiple nodeJS vulnerabilities (CVE-2018-12122 CVE-2018-12121 CVE-2018-12123 CVE-2018-12116)	27 Mar 201922:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by Node.js vulnerabilities	29 Mar 201910:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Local is affected by multiple vulnerabilities (CVE-2018-12116, CVE-2018-12121, CVE-2018-12122, CVE-2018-12123)	15 Apr 201915:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Node.js and OpenSSL affect IBM Watson Assistant on IBM Cloud Private	11 Apr 201921:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Node.js affect IBM Voice Gateway	20 Feb 201918:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Cloud App Management V2018	3 May 201914:35	–	ibm

Vulners

Node

novell suse_enterprise_storageMatch4

novell suse_openstack_cloudMatch7

novell suse_linux_enterprise_module_for_web_scriptingMatch12

node.js node.jsRange6–6.15.0

node.js node.jsRange8–8.14.0

novell suse_linux_enterprise_module_for_web_scriptingMatch15

red_hat openshift_container_platformRange3.6–3.10

novell opensuse_leapMatch42.3

novell opensuse_leapMatch15.0

Source	Link
access	www.access.redhat.com/errata/RHSA-2019:1821
nodejs	www.nodejs.org/en/blog/vulnerability/november-2018-security-releases/
github	www.github.com/nodejs/node/commit/513e9747a22386bc9c93a12f9698561827a1e631
suse	www.suse.com/pt-br/security/cve/CVE-2018-12116/
access	www.access.redhat.com/security/cve/cve-2018-12116
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16
web	www.web.nvd.nist.gov/view/vuln/detail

20 Jan 2026 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 37.5

CVSS 27.8

EPSS0.04612