Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
on-headers vulnerable to http response header manipulation
Vulnerability Description
on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions `<1.1.0` may result in response headers being inadvertently modified when an array is passed to `response.writeHead()`. Users should upgrade to version 1.1.0 to receive a patch. Uses are strongly encouraged to upgrade to `1.1.0`, but this issue can be worked around by passing an object to `response.writeHead()` rather than an array.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
Vulnerability Type
非预期数据类型处理不恰当
Vulnerability Title
on-headers 安全漏洞
Vulnerability Description
on-headers是jshttp开源的一个应用软件。 on-headers 1.1.0版本存在安全漏洞，该漏洞源于传递数组到response.writeHead时可能无意修改响应头。
CVSS Information
N/A
Vulnerability Type
N/A