Debian/nodejs: high 7.5
Node.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allow remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.
Action: Upgrade nodejs to 4.3.0~dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.3.0~dfsg-1 | - |
Fixed versions
| 4.3.0~dfsg-1 |
Sources
- osv: DEBIAN-CVE-2016-2086#Debian:14/nodejs
- https://security-tracker.debian.org/tracker/CVE-2016-2086
published · modified · JSON