https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T09:59:55.946281+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-02939 bdu:2019-02939 2026-10-02T09:59:55.988295+00:00 bdu:2019-02939 https://cve.radiocsirt.org/vuln/cnvd-2019-42556 cnvd-2019-42556 2026-10-02T09:59:55.988343+00:00 cnvd-2019-42556 https://cve.radiocsirt.org/vuln/euvd-2026-65652 EUVD-2026-65652 2026-10-02T09:59:55.988359+00:00 EUVD-2026-65652 https://cve.radiocsirt.org/vuln/fkie_cve-2018-12116 fkie_cve-2018-12116 2026-10-02T09:59:55.988371+00:00

Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can be convinced to use unsanitized user-provided Unicode data for the `path` option of an HTTP request, then data can be provided which will trigger a second, unexpected, and user-defined HTTP request to made to the same server.

 https://cve.radiocsirt.org/vuln/ghsa-mfjx-w835-f3w2 GHSA-mfjx-w835-f3w2 2026-10-02T09:59:55.988402+00:00

Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can be convinced to use unsanitized user-provided Unicode data for the `path` option of an HTTP request, then data can be provided which will trigger a second, unexpected, and user-defined HTTP request to made to the same server.

 https://cve.radiocsirt.org/vuln/gsd-2018-12116 gsd-2018-12116 2026-10-02T09:59:55.988418+00:00 gsd-2018-12116 https://cve.radiocsirt.org/vuln/msrc_cve-2018-12116 msrc_CVE-2018-12116 — Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can be convinced to use un… 2026-10-02T09:59:55.988428+00:00 msrc_CVE-2018-12116 https://cve.radiocsirt.org/vuln/opensuse-su-2019:0089-1 openSUSE-SU-2019:0089-1 — Security update for nodejs8 2026-10-02T09:59:55.988447+00:00

Security update for nodejs8

 https://cve.radiocsirt.org/vuln/rhsa-2019:1821 RHSA-2019:1821 — Red Hat Security Advisory: rh-nodejs8-nodejs security update 2026-10-02T09:59:55.988465+00:00

nodejs: HTTP request splitting nodejs: Denial of Service with large HTTP headers nodejs: Slowloris HTTP Denial of Service nodejs: Hostname spoofing in URL parser for javascript protocol nodejs-tar: Arbitrary file overwrites when extracting tarballs containing a hard-link nodejs: Insufficient Slowloris fix causing DoS via server.headersTimeout bypass

 https://cve.radiocsirt.org/vuln/suse-su-2019:0117-1 SUSE-SU-2019:0117-1 — Security update for nodejs4 2026-10-02T09:59:55.988490+00:00

Security update for nodejs4

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-12116 UBUNTU-CVE-2018-12116 2026-10-02T09:59:55.988508+00:00

Affected: Ubuntu:Pro:18.04:LTS: nodejs

Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can be convinced to use unsanitized user-provided Unicode data for the `path` option of an HTTP request, then data can be provided which will trigger a second, unexpected, and user-defined HTTP request to made to the same server.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2535 WID-SEC-W-2023-2535 — Red Hat rh-nodejs8-nodejs: Mehrere Schwachstellen 2026-10-02T09:59:55.988528+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat rh-nodejs8-nodejs ausnutzen, um Dateien zu manipulieren.