Alpine/nodejs: critical 9.8

Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons

Action: Upgrade nodejs to 12.15.0-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2019-15606#Alpine:v3.20/nodejs
• https://security.alpinelinux.org/vuln/CVE-2019-15606

published 2020-02-07T15:15:11.413Z · modified 2026-09-21T06:17:52.493307166Z · JSON