2 results · Feed
-
Unscored —CVE-2020-8287 EPSS 16%
Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in an HTTP request (for ex…
-
Unscored —CVE-2019-15605 EPSS 57%
HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed