Lucene search
GoogleOSV:ALSA-2020:0598HistoryFeb 25, 2020 - 1:06 p.m.
Important: nodejs:12 security update
2020-02-2513:06:23
Google
osv.dev
3
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.
The following packages have been upgraded to a later upstream version: nodejs (12.16.1).
Security Fix(es):
-
nodejs: HTTP request smuggling using malformed Transfer-Encoding header (CVE-2019-15605)
-
nodejs: Remotely trigger an assertion on a TLS server with a malformed certificate string (CVE-2019-15604)
-
nodejs: HTTP header values do not have trailing optional whitespace trimmed (CVE-2019-15606)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Related
ibm
ibm
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:0455-1)
2021-04-19 00:00:00
Elastic Kibana < 6.8.7, 7.x < 7.6.1 Multiple Vulnerabilities in Node.js (ESA-2020-01) - Linux
2021-01-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:0454-1)
2021-04-19 00:00:00
nessus
nessus
SUSE SLES15 Security Update : nodejs8 (SUSE-SU-2020:0454-1)
2020-02-26 00:00:00
Photon OS 1.0: Nodejs10 PHSA-2020-1.0-0289
2020-04-28 00:00:00
CentOS 8 : nodejs:12 (CESA-2020:0598)
2021-02-01 00:00:00
oraclelinux
oraclelinux
nodejs:12 security update
2020-02-26 00:00:00
nodejs:10 security update
2020-02-26 00:00:00
nodejs:10 security update
2020-04-15 00:00:00
freebsd
freebsd
Node.js -- multiple vulnerabilities
2020-02-06 00:00:00
nodejsblog
nodejsblog
February 2020 Security Releases
2020-02-06 00:00:00
almalinux
almalinux
Important: nodejs:12 security update
2020-02-25 13:06:23
Important: nodejs:10 security update
2020-02-25 07:57:02
altlinux
altlinux
Security fix for the ALT Linux 10 package node version 13.8.0-alt1
2020-02-11 00:00:00
Security fix for the ALT Linux 9 package node version 13.8.0-alt1
2020-02-11 00:00:00
rocky
rocky
nodejs:12 security update
2020-02-25 13:06:23
nodejs:10 security update
2020-02-25 07:57:02
redhat
redhat
(RHSA-2020:0598) Important: nodejs:12 security update
2020-02-25 13:06:23
(RHSA-2020:0579) Important: nodejs:10 security update
2020-02-25 07:57:02
(RHSA-2020:0597) Important: rh-nodejs10-nodejs security update
2020-02-25 12:25:49
suse
suse
Security update for nodejs8 (important)
2020-03-03 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2020-0060
2020-02-23 00:00:00
Critical Photon OS Security Update - PHSA-2020-3.0-0060
2020-02-23 00:00:00
osv
osv
Important: nodejs:12 security update
2020-02-25 13:06:23
nodejs - security update
2020-04-29 00:00:00
Important: nodejs:10 security update
2020-02-25 07:57:02
debian
debian
[SECURITY] [DSA 4669-1] nodejs security update
2020-04-29 21:05:57
ubuntu
ubuntu
Node.js vulnerabilities
2023-09-19 00:00:00
hackerone
hackerone
Node.js: Remotely trigger an assertion on a TLS server with a malformed certificate string
2019-11-26 16:10:02
Node.js: HTTP header values do not have trailing OWS trimmed
2019-11-06 17:46:12
Node.js: HTTP request smuggling using malformed Transfer-Encoding header
2019-11-12 01:11:47
mageia
mageia
Updated http-parser packages fix security vulnerability
2020-03-09 01:37:31
Updated nodejs packages fix security vulnerabilities
2020-09-27 23:06:37
ubuntucve
ubuntucve
cve
cve
prion
prion
Input validation
2020-02-07 15:15:00
Authorization
2020-02-07 15:15:00
Design/Logic Flaw
2020-02-07 15:15:00
redhatcve
redhatcve
nvd
nvd
debiancve
debiancve
cvelist
cvelist
alpinelinux
alpinelinux
amazon
amazon
Important: http-parser
2020-05-05 01:12:00
Important: http-parser
2020-04-20 19:21:00
centos
centos
http security update
2020-03-04 21:38:41
cloudfoundry
cloudfoundry
CVE-2019-15605: Node.js is vulnerable to request smuggling | Cloud Foundry
2020-03-09 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: libuv-1.34.2-1.fc30
2020-02-23 01:09:35
[SECURITY] Fedora 31 Update: nodejs-12.15.0-1.fc31
2020-02-09 01:33:56
[SECURITY] Fedora 31 Update: nghttp2-1.40.0-1.fc31
2020-02-09 01:33:56
veracode
veracode
Denial Of Service (DoS)
2020-02-10 03:28:33
Authorization Bypass
2020-02-10 06:22:36
HTTP Request Smuggling
2020-02-10 08:28:35
github
github
gentoo
gentoo
Node.js: Multiple vulnerabilities
2020-03-20 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00
Oracle Critical Patch Update Advisory - April 2020
2020-04-14 00:00:00