| Package | Affected versions | Patched versions |
|---|---|---|
| node.js | ≥ 10.0.0, < 10.19.0≥ 12.0.0, < 12.15.0≥ 13.0.0, < 13.8.0 | 10.19.012.15.013.8.0 |
| graalvm | = 19.3.1= 20.0.0 | |
| software collections | = 1.0 |
HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free