ALPINE-CVE-2019-15606
ALPINE-CVE-2019-15606
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons
CVSS 9.8 · Critical · Fix available
- Published
- Updated
Stack: system
Affected products and versions
nodejs Alpine:v3.10
- Affected ranges
- ECOSYSTEM: < 10.19.0-r0
Update to 10.19.0-r0
nodejs Alpine:v3.11
- Affected ranges
- ECOSYSTEM: < 12.15.0-r0
Update to 12.15.0-r0
nodejs Alpine:v3.12
- Affected ranges
- ECOSYSTEM: < 12.15.0-r0
Update to 12.15.0-r0
nodejs Alpine:v3.13
- Affected ranges
- ECOSYSTEM: < 12.15.0-r0
Update to 12.15.0-r0
nodejs Alpine:v3.14
- Affected ranges
- ECOSYSTEM: < 12.15.0-r0
Update to 12.15.0-r0
nodejs Alpine:v3.15
- Affected ranges
- ECOSYSTEM: < 12.15.0-r0
Update to 12.15.0-r0
nodejs Alpine:v3.16
- Affected ranges
- ECOSYSTEM: < 12.15.0-r0
Update to 12.15.0-r0
nodejs Alpine:v3.17
- Affected ranges
- ECOSYSTEM: < 12.15.0-r0
Update to 12.15.0-r0
nodejs Alpine:v3.18
- Affected ranges
- ECOSYSTEM: < 12.15.0-r0
Update to 12.15.0-r0
nodejs Alpine:v3.19
- Affected ranges
- ECOSYSTEM: < 12.15.0-r0
Update to 12.15.0-r0
nodejs Alpine:v3.20
- Affected ranges
- ECOSYSTEM: < 12.15.0-r0
Update to 12.15.0-r0
nodejs Alpine:v3.21
- Affected ranges
- ECOSYSTEM: < 12.15.0-r0
Update to 12.15.0-r0
nodejs Alpine:v3.22
- Affected ranges
- ECOSYSTEM: < 12.15.0-r0
Update to 12.15.0-r0
nodejs Alpine:v3.23
- Affected ranges
- ECOSYSTEM: < 12.15.0-r0
Update to 12.15.0-r0
nodejs Alpine:v3.24
- Affected ranges
- ECOSYSTEM: < 12.15.0-r0
Update to 12.15.0-r0
nodejs Alpine:v3.9
- Affected ranges
- ECOSYSTEM: < 10.19.0-r0
Update to 10.19.0-r0