https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:53:21 +0000 https://cve.radiocsirt.org/vuln/certfr-2016-avi-365 certfr-2016-avi-365 https://cve.radiocsirt.org/vuln/certfr-2016-avi-365 https://cve.radiocsirt.org/vuln/cnvd-2016-01244 cnvd-2016-01244 https://cve.radiocsirt.org/vuln/cnvd-2016-01244 https://cve.radiocsirt.org/vuln/euvd-2026-82854 EUVD-2026-82854 https://cve.radiocsirt.org/vuln/euvd-2026-82854 https://cve.radiocsirt.org/vuln/fkie_cve-2016-2216 <p>The HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allows remote attackers to bypass an HTTP response-splitting protection mechanism via UTF-8 encoded Unicode characters in the HTTP header, as demonstrated by %c4%8d%c4%8a.</p> <p>The HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allows remote attackers to bypass an HTTP response-splitting protection mechanism via UTF-8 encoded Unicode characters in the HTTP header, as demonstrated by %c4%8d%c4%8a.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-2216 https://cve.radiocsirt.org/vuln/ghsa-77qx-hwx7-xv2g <p>The HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allows remote attackers to bypass an HTTP response-splitting protection mechanism via UTF-8 encoded Unicode characters in the HTTP header, as demonstrated by %c4%8d%c4%8a.</p> <p>The HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allows remote attackers to bypass an HTTP response-splitting protection mechanism via UTF-8 encoded Unicode characters in the HTTP header, as demonstrated by %c4%8d%c4%8a.</p> https://cve.radiocsirt.org/vuln/ghsa-77qx-hwx7-xv2g https://cve.radiocsirt.org/vuln/gsd-2016-2216 gsd-2016-2216 https://cve.radiocsirt.org/vuln/gsd-2016-2216 https://cve.radiocsirt.org/vuln/suse-su-2019:14246-1 <p>Security update for Mozilla Firefox</p> <p>Security update for Mozilla Firefox</p> https://cve.radiocsirt.org/vuln/suse-su-2019:14246-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-2216 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: nodejs, Ubuntu:Pro:16.04:LTS: nodejs</p> <p>The HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allows remote attackers to bypass an HTTP response-splitting protection mechanism via UTF-8 encoded Unicode characters in the HTTP header, as demonstrated by %c4%8d%c4%8a.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: nodejs, Ubuntu:Pro:16.04:LTS: nodejs</p> <p>The HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allows remote attackers to bypass an HTTP response-splitting protection mechanism via UTF-8 encoded Unicode characters in the HTTP header, as demonstrated by %c4%8d%c4%8a.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-2216