| Package | Affected versions | Patched versions |
|---|---|---|
| nodejs | = 0.10.0= 0.10.1= 0.10.10= 0.10.11= 0.10.12= 0.10.13= 0.10.14= 0.10.15= 0.10.16= 0.10.17= 0.10.18= 0.10.19= 0.10.2= 0.10.20= 0.10.3= 0.10.4= 0.10.5= 0.10.6= 0.10.7= 0.10.8= 0.10.9= 0.8.0= 0.8.1= 0.8.10= 0.8.11= 0.8.12= 0.8.13= 0.8.14= 0.8.15= 0.8.16= 0.8.17= 0.8.18= 0.8.19= 0.8.2= 0.8.20= 0.8.21= 0.8.22= 0.8.23= 0.8.24= 0.8.25= 0.8.3= 0.8.4= 0.8.5= 0.8.6= 0.8.7= 0.8.8= 0.8.9 |
The HTTP server in Node.js 0.10.x before 0.10.21 and 0.8.x before 0.8.26 allows remote attackers to cause a denial of service (memory and CPU consumption) by sending a large number of pipelined requests without reading the response.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free