CVE:CVE-2022-35256
CNNVD:CNNVD-202210-1266
Node.js是一个开源、跨平台的 JavaScript 运行时环境。
Node.js 存在安全漏洞，该漏洞源于HTTP 请求走私由于头字段解析不正确。
solution:Upgrade nodejs node.js to a higher version than 14.14.0,14.20.1,16.12.0,16.17.1,18.9.1,and avoid the version [14.0.0,14.14.0],[14.15.0,14.20.1),[16.0.0,16.12.0],[16.13.0,16.17.1),[18.0.0,18.9.1); Upgrade llhttp llhttp to a higher version than 6.0.10,and avoid the version (,6.0.10); Upgrade siemens sinec_ins to a higher version than 1.0,1.0,1.0:sp1,1.0:sp2,and avoid the version (,1.0),1.0,1.0:sp1,1.0:sp2; Upgrade debian debian_linux to a higher version than 11.0,and avoid the version 11.0