CLEANSTART-2025-BP09896
See a problem?- Import Source
- https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2025/CLEANSTART-2025-BP09896.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLEANSTART-2025-BP09896
- Upstream
- Published
- 2026-10-31T14:34:01Z
- Modified
- 2026-10-31T16:03:19Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons
- Details
-
CVE-2019-15606 affects multiple packages. Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons See references for individual vulnerability details.
- References
Affected packages
CleanStart / nodejs-23
Package
- Name
- nodejs-23
- Purl
- pkg:apk/cleanstart/nodejs-23
CleanStart / nodejs-current
Package
- Name
- nodejs-current
- Purl
- pkg:apk/cleanstart/nodejs-current
CleanStart / nodejs18
Package
- Name
- nodejs18
- Purl
- pkg:apk/cleanstart/nodejs18?arch=aarch64