Lucene search

K
cvelistHackeroneCVELIST:CVE-2022-35256
HistoryDec 05, 2022 - 12:00 a.m.

CVE-2022-35256

2022-12-0500:00:00
CWE-444
hackerone
raw.githubusercontent.com
4

6.5 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.3%

The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that are not terminated with CLRF. This may result in HTTP Request Smuggling.