← Back to CVE List

CVE-2022-35256

Published: 2022-12-05T22:15Z
Last Modified: 2024-11-21T07:10Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that are not terminated with CLRF. This may result in HTTP Request Smuggling. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt