16857 matches found
Improper Handling Of HTTP Headers
on-headers is vulnerable to Improper Handling of HTTP Headers. The vulnerability is due to unexpected header modification caused by incorrect processing when an array is passed to response.writeHead, potentially altering response headers unintentionally...
EulerOS 2.0 SP12 : golang (EulerOS-SA-2025-1820)
According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate...
EulerOS 2.0 SP12 : golang (EulerOS-SA-2025-1821)
According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate...
Ubuntu 16.04 LTS / 18.04 LTS : PHP vulnerabilities (USN-7645-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7645-1 advisory. It was discovered that PHP incorrectly parsed certain HTTP response headers. An attacker could possibly use this issue to cause incorrect MIM...
SUSE CVE-2025-7339
on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions 1.1.0 may result in response headers being inadvertently modified when an array is passed to response.writeHead. Users should upgrade to version 1.1.0 to receive a patch. Uses are...
10by10-react-app (1.2.1), 192.168.0.172 (4.6.1) +13869 more potentially affected by CVE-2025-7339 via on-headers (>=1.0.0, <=1.0.2)
on-headers NPM version =1.0.0, =1.0.2, =1.0.0, =0.30.0, =0.2.0, =0.0.28, =0.0.36 - 4design 0.0.1 - 540269584 0.0.0 - 6ix 0.0.0-canary.0 - 7-segunda-preentrega 1.0.0 and more Source cves: CVE-2025-7339 Source advisory: OSV:GHSA-76C9-3JPH-RJ3Q...
GHSA-76C9-3JPH-RJ3Q on-headers is vulnerable to http response header manipulation
Impact A bug in on-headers versions 1.1.0 may result in response headers being inadvertently modified when an array is passed to response.writeHead Patches Users should upgrade to 1.1.0 Workarounds Uses are encouraged to upgrade to 1.1.0, but this issue can be worked around by passing an object t...
on-headers is vulnerable to http response header manipulation
Impact A bug in on-headers versions 1.1.0 may result in response headers being inadvertently modified when an array is passed to response.writeHead Patches Users should upgrade to 1.1.0 Workarounds Uses are encouraged to upgrade to 1.1.0, but this issue can be worked around by passing an object t...
10by10-react-app (1.2.1), 192.168.0.172 (4.6.1) +13869 more potentially affected by CVE-2025-7339 via on-headers (>=1.0.0, <=1.0.2)
on-headers NPM version =1.0.0, =1.0.2, =1.0.0, =0.30.0, =0.2.0, =0.0.28, =0.0.36 - 4design 0.0.1 - 540269584 0.0.0 - 6ix 0.0.0-canary.0 - 7-segunda-preentrega 1.0.0 and more Source cves: CVE-2025-7339 Source advisory: GHSA-76C9-3JPH-RJ3Q...
Improper Handling of Unexpected Data Type
Overview Affected versions of this package are vulnerable to Improper Handling of Unexpected Data Type via the response.writeHead function. An attacker can manipulate HTTP response headers by passing an array to this function, potentially leading to unintended disclosure or modification of header...
org.webjars.npm:compression (>=1.5.2, <=1.7.4), org.webjars.npm:express-session (>=1.15.6, <=1.17.1) +1 more potentially affected by CVE-2025-7339 via org.webjars.npm:on-headers (1.0.2)
org.webjars.npm:on-headers MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:on-headers and may be impacted: - org.webjars.npm:compression =1.5.2, =1.15.6, =1.9.0, =1.9.1 Source cves: CVE-2025-7339 Source advisory:...
DEBIAN-CVE-2025-7339
on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions 1.1.0 may result in response headers being inadvertently modified when an array is passed to response.writeHead. Users should upgrade to version 1.1.0 to receive a patch. Uses are...
CVE-2025-7339
on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions 1.1.0 may result in response headers being inadvertently modified when an array is passed to response.writeHead. Users should upgrade to version 1.1.0 to receive a patch. Uses are...
UBUNTU-CVE-2025-7339
on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions 1.1.0 may result in response headers being inadvertently modified when an array is passed to response.writeHead. Users should upgrade to version 1.1.0 to receive a patch. Uses are...
CVE-2025-7339 on-headers vulnerable to http response header manipulation
on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions 1.1.0 may result in response headers being inadvertently modified when an array is passed to response.writeHead. Users should upgrade to version 1.1.0 to receive a patch. Uses are...
CVE-2025-7339 on-headers vulnerable to http response header manipulation
on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions 1.1.0 may result in response headers being inadvertently modified when an array is passed to response.writeHead. Users should upgrade to version 1.1.0 to receive a patch. Uses are...
CVE-2025-7339
on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions "1.1.0" may result in response headers being inadvertently modified when an array is passed to "response.writeHead". Users should upgrade to version 1.1.0 to receive a patch. Uses are...
10by10-react-app (1.2.1), 192.168.0.172 (4.6.1) +13973 more potentially affected by CVE-2025-7339 via on-headers (>=0.0.0, <=1.0.2)
on-headers NPM version =0.0.0, =1.0.2, =1.0.0, =0.30.0, =0.2.0, =0.0.28, =0.0.36 - 4design 0.0.1 - 540269584 0.0.0 - 6ix 0.0.0-canary.0 - 7-segunda-preentrega 1.0.0 and more Source cves: CVE-2025-7339 Source advisory: MEND:CVE-2025-7339...
CVE-2025-7339 on-headers vulnerable to http response header manipulation
on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions 1.1.0 may result in response headers being inadvertently modified when an array is passed to response.writeHead. Users should upgrade to version 1.1.0 to receive a patch. Uses are...
CVE-2025-7339
on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions 1.1.0 may result in response headers being inadvertently modified when an array is passed to response.writeHead. Users should upgrade to version 1.1.0 to receive a patch. Uses are...