Skip to content

Known vulnerabilities in Node

Is your version affected?

CVE Summary Score Published
CVE-2020-8251 Node.js < 14.11.0 is vulnerable to HTTP denial of service (DoS) attacks based on delayed requests submission which can… Not rated Sep 18, 2020
CVE-2019-15606 Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on… Not rated Feb 7, 2020
CVE-2019-15604 Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when sending a crafted X.509… Not rated Feb 7, 2020
CVE-2019-15605 HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed Not rated Feb 7, 2020

Other NodeJS products