Lucene search

K
cvelistHackeroneCVELIST:CVE-2022-32214
HistoryJul 14, 2022 - 12:00 a.m.

CVE-2022-32214

2022-07-1400:00:00
CWE-444
hackerone
raw.githubusercontent.com
3

6.4 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.5%

The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling (HRS).