2 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-43616
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The npm ci command in npm 7.x and 8.x through 8.1.3 proceeds with an installation even if dependency information in package-lock.json differs from package.json...
9.8CVSS6.7AI score0.02534EPSS
SaveExploits1References3
Important: nodejs
Issue Overview: An HTTP Request Smuggling HRS vulnerability was found in the llhttp library, used by Node.JS. Spaces as part of the header names were accepted as valid. In situations where HTTP conversations are being proxied such as proxy, reverse-proxy, load-balancer, an attacker can use this...
9.8CVSS8.4AI score0.92488EPSS
SaveExploits18
20