https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T06:50:14.530061+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-10618 bdu:2025-10618 2026-10-05T06:50:14.547287+00:00 bdu:2025-10618 https://cve.radiocsirt.org/vuln/bell-cve-2025-23167 BELL-CVE-2025-23167 2026-10-05T06:50:14.547327+00:00

Affected: Alpaquita:23: openjdk-nik-23-17, Alpaquita:23: openjdk-nik-23-21, Alpaquita:23: openjdk-nik-24-24, Alpaquita:25: openjdk-nik-23-17, Alpaquita:25: openjdk-nik-23-21, Alpaquita:25: openjdk-nik-24-24, Alpaquita:stream: nodejs, Alpaquita:stream: openjdk-nik-23-17, Alpaquita:stream: openjdk-nik-23-21, Alpaquita:stream: openjdk-nik-24-24 and 10 more

 https://cve.radiocsirt.org/vuln/bit-node-2025-23167 BIT-node-2025-23167 2026-10-05T06:50:14.547382+00:00

Affected: Bitnami: node

A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the required `\r\n\r\n`. This inconsistency enables request smuggling, allowing attackers to bypass proxy-based access controls and submit unauthorized requests.

The issue was resolved by upgrading `llhttp` to version 9, which enforces correct header termination.

Impact: * This vulnerability affects only Node.js 20.x users prior to the `llhttp` v9 upgrade.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0434 certfr-2025-avi-0434 — De multiples vulnérabilités ont été découvertes dans Node.js. Elles permettent à un attaquant de provoquer un déni de s… 2026-10-05T06:50:14.547410+00:00 certfr-2025-avi-0434 https://cve.radiocsirt.org/vuln/euvd-2026-241435 EUVD-2026-241435 2026-10-05T06:50:14.547426+00:00 EUVD-2026-241435 https://cve.radiocsirt.org/vuln/fkie_cve-2025-23167 fkie_cve-2025-23167 2026-10-05T06:50:14.547437+00:00

A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the required `\r\n\r\n`. This inconsistency enables request smuggling, allowing attackers to bypass proxy-based access controls and submit unauthorized requests.

The issue was resolved by upgrading `llhttp` to version 9, which enforces correct header termination.

Impact: * This vulnerability affects only Node.js 20.x users prior to the `llhttp` v9 upgrade.

 https://cve.radiocsirt.org/vuln/ghsa-hchw-qwx7-4w4c GHSA-hchw-qwx7-4w4c 2026-10-05T06:50:14.547522+00:00

A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the required `\r\n\r\n`. This inconsistency enables request smuggling, allowing attackers to bypass proxy-based access controls and submit unauthorized requests.

The issue was resolved by upgrading `llhttp` to version 9, which enforces correct header termination.

Impact: * This vulnerability affects only Node.js 20.x users prior to the `llhttp` v9 upgrade.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-23167 msrc_CVE-2025-23167 — A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the require… 2026-10-05T06:50:14.547556+00:00 msrc_CVE-2025-23167 https://cve.radiocsirt.org/vuln/rhsa-2025:8468 RHSA-2025:8468 — Red Hat Security Advisory: nodejs:20 security update 2026-10-05T06:50:14.547588+00:00

nodejs: Memory Leak in Node.js ReadFileUtf8 Binding Leading to DoS nodejs: Remote Crash via SignTraits::DeriveBits() in Node.js nodejs: Improper HTTP Header Termination in Node.js 20 Enables Request Smuggling

 https://cve.radiocsirt.org/vuln/suse-su-2025:02039-1 SUSE-SU-2025:02039-1 — Security update for nodejs20 2026-10-05T06:50:14.547634+00:00

Security update for nodejs20

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1055 WID-SEC-W-2025-1055 — Node.js: Mehrere Schwachstellen 2026-10-05T06:50:14.547656+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in Node.js ausnutzen, um einen Denial of Service Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.