Alpine/nodejs: critical 9.8

HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed

Action: Upgrade nodejs to 12.15.0-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2019-15605#Alpine:v3.16/nodejs
• https://security.alpinelinux.org/vuln/CVE-2019-15605

published 2020-02-07T15:15:11.287Z · modified 2026-09-21T06:17:52.493151220Z · JSON