https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 06:50:08 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-10618 bdu:2025-10618 https://cve.radiocsirt.org/vuln/bdu:2025-10618 https://cve.radiocsirt.org/vuln/bell-cve-2025-23167 <p><strong>Affected:</strong> Alpaquita:23: openjdk-nik-23-17, Alpaquita:23: openjdk-nik-23-21, Alpaquita:23: openjdk-nik-24-24, Alpaquita:25: openjdk-nik-23-17, Alpaquita:25: openjdk-nik-23-21, Alpaquita:25: openjdk-nik-24-24, Alpaquita:stream: nodejs, Alpaquita:stream: openjdk-nik-23-17, Alpaquita:stream: openjdk-nik-23-21, Alpaquita:stream: openjdk-nik-24-24 and 10 more</p> <p><strong>Affected:</strong> Alpaquita:23: openjdk-nik-23-17, Alpaquita:23: openjdk-nik-23-21, Alpaquita:23: openjdk-nik-24-24, Alpaquita:25: openjdk-nik-23-17, Alpaquita:25: openjdk-nik-23-21, Alpaquita:25: openjdk-nik-24-24, Alpaquita:stream: nodejs, Alpaquita:stream: openjdk-nik-23-17, Alpaquita:stream: openjdk-nik-23-21, Alpaquita:stream: openjdk-nik-24-24 and 10 more</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-23167 https://cve.radiocsirt.org/vuln/bit-node-2025-23167 <p><strong>Affected:</strong> Bitnami: node</p> <p>A flaw in Node.js 20&#39;s HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the required `\r\n\r\n`. This inconsistency enables request smuggling, allowing attackers to bypass proxy-based access controls and submit unauthorized requests.</p> <p>The issue was resolved by upgrading `llhttp` to version 9, which enforces correct header termination.</p> <p>Impact: * This vulnerability affects only Node.js 20.x users prior to the `llhttp` v9 upgrade.</p> <p><strong>Affected:</strong> Bitnami: node</p> <p>A flaw in Node.js 20&#39;s HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the required `\r\n\r\n`. This inconsistency enables request smuggling, allowing attackers to bypass proxy-based access controls and submit unauthorized requests.</p> <p>The issue was resolved by upgrading `llhttp` to version 9, which enforces correct header termination.</p> <p>Impact: * This vulnerability affects only Node.js 20.x users prior to the `llhttp` v9 upgrade.</p> https://cve.radiocsirt.org/vuln/bit-node-2025-23167 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0434 certfr-2025-avi-0434 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0434 https://cve.radiocsirt.org/vuln/euvd-2026-241435 EUVD-2026-241435 https://cve.radiocsirt.org/vuln/euvd-2026-241435 https://cve.radiocsirt.org/vuln/fkie_cve-2025-23167 <p>A flaw in Node.js 20&#39;s HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the required `\r\n\r\n`. This inconsistency enables request smuggling, allowing attackers to bypass proxy-based access controls and submit unauthorized requests.</p> <p>The issue was resolved by upgrading `llhttp` to version 9, which enforces correct header termination.</p> <p>Impact: * This vulnerability affects only Node.js 20.x users prior to the `llhttp` v9 upgrade.</p> <p>A flaw in Node.js 20&#39;s HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the required `\r\n\r\n`. This inconsistency enables request smuggling, allowing attackers to bypass proxy-based access controls and submit unauthorized requests.</p> <p>The issue was resolved by upgrading `llhttp` to version 9, which enforces correct header termination.</p> <p>Impact: * This vulnerability affects only Node.js 20.x users prior to the `llhttp` v9 upgrade.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-23167 https://cve.radiocsirt.org/vuln/ghsa-hchw-qwx7-4w4c <p>A flaw in Node.js 20&#39;s HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the required `\r\n\r\n`. This inconsistency enables request smuggling, allowing attackers to bypass proxy-based access controls and submit unauthorized requests.</p> <p>The issue was resolved by upgrading `llhttp` to version 9, which enforces correct header termination.</p> <p>Impact: * This vulnerability affects only Node.js 20.x users prior to the `llhttp` v9 upgrade.</p> <p>A flaw in Node.js 20&#39;s HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the required `\r\n\r\n`. This inconsistency enables request smuggling, allowing attackers to bypass proxy-based access controls and submit unauthorized requests.</p> <p>The issue was resolved by upgrading `llhttp` to version 9, which enforces correct header termination.</p> <p>Impact: * This vulnerability affects only Node.js 20.x users prior to the `llhttp` v9 upgrade.</p> https://cve.radiocsirt.org/vuln/ghsa-hchw-qwx7-4w4c https://cve.radiocsirt.org/vuln/msrc_cve-2025-23167 msrc_CVE-2025-23167 https://cve.radiocsirt.org/vuln/msrc_cve-2025-23167 https://cve.radiocsirt.org/vuln/rhsa-2025:8468 <p>nodejs: Memory Leak in Node.js ReadFileUtf8 Binding Leading to DoS nodejs: Remote Crash via SignTraits::DeriveBits() in Node.js nodejs: Improper HTTP Header Termination in Node.js 20 Enables Request Smuggling</p> <p>nodejs: Memory Leak in Node.js ReadFileUtf8 Binding Leading to DoS nodejs: Remote Crash via SignTraits::DeriveBits() in Node.js nodejs: Improper HTTP Header Termination in Node.js 20 Enables Request Smuggling</p> https://cve.radiocsirt.org/vuln/rhsa-2025:8468 https://cve.radiocsirt.org/vuln/suse-su-2025:02039-1 <p>Security update for nodejs20</p> <p>Security update for nodejs20</p> https://cve.radiocsirt.org/vuln/suse-su-2025:02039-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1055 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Node.js ausnutzen, um einen Denial of Service Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Node.js ausnutzen, um einen Denial of Service Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1055