Debian/nodejs: high 7.5
Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can be convinced to use unsanitized user-provided Unicode data for the `path` option of an HTTP request, th
Action: Upgrade nodejs to 10.15.0~dfsg-6 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 10.15.0~dfsg-6 | - |
Fixed versions
| 10.15.0~dfsg-6 |
Sources
- osv: DEBIAN-CVE-2018-12116#Debian:13/nodejs
- https://security-tracker.debian.org/tracker/CVE-2018-12116
published · modified · JSON