Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly parse and validate Transfer-Encoding headers and can lead to HTTP Request Smuggling (HRS).
CVSS Information
N/A
Vulnerability Type
HTTP请求的解释不一致性(HTTP请求私运)
Vulnerability Title
Node.js 环境问题漏洞
Vulnerability Description
Node.js是一个开源、跨平台的 JavaScript 运行时环境。 Node.js 存在环境问题漏洞，该漏洞源于Node.js http 模块中的 llhttp 解析器未正确解析和验证 Transfer-Encoding 标头，这可能导致 HTTP 请求走私 (HRS)，以下产品和版本受到影响：Node.js 18.x、16.x 和 14.x 版本。
CVSS Information
N/A
Vulnerability Type
N/A