Red Hat Security Advisory

RHSA-2020:0707

http-parser security update

Released 2020-03-04 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2019-11704 CVE-2019-15605 · GHSA-rv6p-2q56-m955

HIGH 75

HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.57132 Published 2020-02-07 Fixed in 10.19.0, 12.15.0 +1 CWE-444