« List of all CVEs

CVE-2019-15605

Published: 2/7/2020 Last updated: 4/30/2025 Reserved: 8/26/2019

HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed

CNA assigner: hackerone (36234546-b8fa-4601-9d6f-f4e334aa8ea1) Requested by: n/a

Opam packages affected (1)

conf-npm

Products affected (1)

Product Vendor Version
Node NodeJS <= 1.1.6

References (42)