SecurityNode.js Blogabout 14 years ago
HTTP Server Security Vulnerability: Please upgrade to 0.6.17
1 min read
A vulnerability in Node's HTTP parser allows an attacker to append other requests' data to their own headers. Versions 0.5/0.6 before 0.6.17 and 0.7 before 0.7.8 are affected. Matthew Daley reported the flaw. Upgrade to 0.6.17 or apply the fix in commit c9a231d.
Level
Hype check
Tap to vote and see what everyone thinks.
