2 matches found
Improper Handling of Unexpected Data Type
Overview Affected versions of this package are vulnerable to Improper Handling of Unexpected Data Type via the response.writeHead function. An attacker can manipulate HTTP response headers by passing an array to this function, potentially leading to unintended disclosure or modification of header...
4.6CVSS6.8AI score0.00174EPSS
SaveExploits0References2
Joyent Node.js CRLF Injection Vulnerability
Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. The platform is primarily used for building highly scalable applications and writing code that can handle tens of thousands of simultaneous connections to a singl...
6.1CVSS9.2AI score0.04093EPSS
SaveExploits0References1
20