New releases of Node.js 13.8, 12.15, and 10.19 with vulnerability fixes.
Developers of the Node.js server-side JavaScript platform have released patch versions 13.8.0, 12.15.0, and 10.19.0, which fix three vulnerabilities: CVE-2019-15606 — improper handling of optional whitespace characters (OWS) following the value in an HTTP header; CVE-2019-15605 — the possibility of an HRS (HTTP Request Smuggling) attack, allowing insertion into the content of other requests processed in the same stream between frontend and backend) through transmission […]
