Lucene search
+L

1 matches found

OSV
OSV
added 2018/05/17 2:29 p.m.11 views

AZL-40842 CVE-2018-7159 affecting package rubygem-http_parser for versions less than 0.8.0-1

The HTTP parser in all current versions of Node.js ignores spaces in the Content-Length header, allowing input such as Content-Length: 1 2 to be interpreted as having a value of 12. The HTTP specification does not allow for spaces in the Content-Length value and the Node.js HTTP parser has been...

5.3CVSS6.5AI score0.03621EPSS
SaveExploits0References1
Rows per page
Query Builder