How many Node.js llhttp CVEs are in CISA KEV?

None of Node.js llhttp's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Node.js llhttp vulnerabilities?

Yes — 1 of Node.js llhttp's CVEs have a known public exploit.

Which versions of Node.js llhttp are affected?

272 distinct Node.js llhttp versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Node.js llhttp CVEs?

Node.js llhttp's CVEs most often map to these CWE weakness types: CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')).

How many critical Node.js llhttp vulnerabilities are there?

Node.js llhttp has 2 critical and 1 high-severity CVEs.

What is the average severity of Node.js llhttp CVEs?

The average CVSS base score across Node.js llhttp's scored CVEs is 7.4.

Node.js llhttp Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Node.js llhttp vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Node.js llhttp Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Node.js llhttp has 7 published CVE records since 2021, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Node.js llhttp, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Node.js llhttp's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High1

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Node.js llhttp's CVEs are currently listed in CISA's KEV catalog.

Public exploits

One of Node.js llhttp's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every Node.js llhttp version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

0.0.14 CVEs
0.0.24 CVEs
0.0.34 CVEs
0.0.44 CVEs
0.0.64 CVEs
0.1.04 CVEs
0.1.14 CVEs
0.1.104 CVEs
0.1.1004 CVEs
0.1.1014 CVEs
0.1.1024 CVEs
0.1.1034 CVEs

Common weakness types

The CWE weakness categories most often found in Node.js llhttp CVEs. Follow any weakness for its full explanation.

CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')6 CVEs

Disclosure activity by year

How many Node.js llhttp CVEs were published each year.

2021

2022

2023

Other Node.js products

Browse vulnerabilities for other products by Node.js.

Node203 CVEs node.js189 CVEs undici35 CVEs nodejs19 CVEs elliptic1 CVEs import-in-the-middle1 CVEs

All Node.js vulnerabilities

Frequently asked questions

Common questions about Node.js llhttp vulnerabilities.

How many CVEs does Node.js llhttp have?: Node.js llhttp has 7 published CVE records since 2021.
How many Node.js llhttp CVEs are in CISA KEV?: None of Node.js llhttp's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Node.js llhttp vulnerabilities?: Yes — 1 of Node.js llhttp's CVEs have a known public exploit.
Which versions of Node.js llhttp are affected?: 272 distinct Node.js llhttp versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Node.js llhttp CVEs?: Node.js llhttp's CVEs most often map to these CWE weakness types: CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')).
How many critical Node.js llhttp vulnerabilities are there?: Node.js llhttp has 2 critical and 1 high-severity CVEs.
What is the average severity of Node.js llhttp CVEs?: The average CVSS base score across Node.js llhttp's scored CVEs is 7.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Node.js llhttp vulnerabilities

Monitor new Node.js llhttp vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

Node.js llhttp Vulnerabilities