Nodejs Node.js
Approved changes feed: RSS · Atom
cpe:2.3:a:nodejs:node.js:-:*:*:*:*:-:*:*
part: a version: - update: *
| Vendor | Nodejs (1eb6e5de-a495-50c0-9bb4-c8200a117578) |
|---|---|
| Product | Node.Js (35820ba0-265c-5d96-8f6e-66bb0af213e7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | - |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/nodejs |
purl2cpe | 2026-06-01 10:15:58.701127 |
pkg:deb/ubuntu/nodejs |
purl2cpe | 2026-06-01 10:15:58.701129 |
pkg:github/nodejs/node |
purl2cpe | 2026-06-01 10:15:58.701130 |
pkg:rpm/fedora/nodejs |
purl2cpe | 2026-06-01 10:15:58.701132 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-27982 |
vulnerable | 2026-06-08 06:33:25.259414 |
Details available
MEDIUM (6.5)
The team has identified a critical vulnerability in the http server of the most recent version of Node, where malformed headers can lead to HTTP request smuggling. Specifically, if a space is placed before a content-length header, it is not interpreted correctly, enabling attackers to smuggle in a second request within the body of the first.
Published: 2024-05-07T16:40:02.518Z
Updated: 2025-11-04T22:06:04.271Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.