Node.js HTTP Parser Vulnerability Affects All Current Versions
CVE-2018-7159

5.3MEDIUM

Key Information:

Vendor: The Node.js Project
Status: Node.js
Vendor: CVE Published:; 17 May 2018

🔔 Create The Node.js Project Vulnerability Alert

What is CVE-2018-7159?

The HTTP parser in Node.js improperly handles spaces in the 'Content-Length' header, interpreting inputs like 'Content-Length: 1 2' as '12'. This deviation from HTTP standards could lead to vulnerabilities in applications relying on the accuracy of the parsed length, allowing for potential inconsistencies in data processing. Users are encouraged to verify the actual length of data post-parsing to mitigate risks associated with incorrect assumptions regarding input accuracy.