[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2019-15605":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T20:55:29.923Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":27,"aliases":28,"duplicate_of":9,"upstream":29,"downstream":30,"duplicates":75,"related":76,"reserved_at":9,"published_at":85,"modified_at":86,"state":87,"summary":88,"references_raw":97,"kevs":196,"epss":197,"epss_history":200,"metrics":446,"affected":455},"CVE-2019-15605","HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-444","Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')","The product acts as an intermediary HTTP agent\n         (such as a proxy or firewall) in the data flow between two\n         entities such as a client and server, but it does not\n         interpret malformed HTTP requests or responses in ways that\n         are consistent with how the messages will be processed by\n         those entities that are at the ultimate destination.","weakness","Incomplete","Base",[19,23],{"id":20,"name":21,"techniques":22},"CAPEC-273","HTTP Response Smuggling",[],{"id":24,"name":25,"techniques":26},"CAPEC-33","HTTP Request Smuggling",[],[],[],[],[31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73],{"_key":32},"ALPINE-CVE-2019-15605",{"_key":34},"RHSA-2020:0598",{"_key":36},"RHSA-2020:0703",{"_key":38},"RHSA-2020:0707",{"_key":40},"RHSA-2020:0708",{"_key":42},"RHSA-2020:1510",{"_key":44},"SUSE-SU-2020:0427-1",{"_key":46},"SUSE-SU-2020:0429-1",{"_key":48},"SUSE-SU-2020:0454-1",{"_key":50},"SUSE-SU-2020:0455-1",{"_key":52},"SUSE-SU-2020:0488-1",{"_key":54},"OPENSUSE-SU-2020:0293-1",{"_key":56},"RHSA-2020:0573",{"_key":58},"RHSA-2020:0579",{"_key":60},"RHSA-2020:0597",{"_key":62},"RHSA-2020:0602",{"_key":64},"DSA-4669-1",{"_key":66},"MGASA-2020-0131",{"_key":68},"MGASA-2020-0372",{"_key":70},"UBUNTU-CVE-2019-15605",{"_key":72},"DEBIAN-CVE-2019-15605",{"_key":74},"USN-6380-1",[],[77,78,79,80,81,82,83,84],{"_key":44},{"_key":46},{"_key":48},{"_key":50},{"_key":52},{"_key":54},{"_key":66},{"_key":68},"2020-02-07T14:55:22.000Z","2025-04-30T22:24:23.404Z","Modified",{"cisa_kev":89,"cisa_ransomware":89,"cisa_vendor":9,"epss_severity":90,"epss_score":91,"severity":92,"severity_score":93,"severity_version":94,"severity_source":95,"severity_vector":96,"severity_status":87},false,"high",0.32252,"critical",9.8,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[98,105,109,115,119,123,127,131,137,141,145,149,154,159,165,169,174,178,183,187,191],{"url":99,"sources":100,"tags":102},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLB676PDU4RJQLWQUA277YNGYYNEYGWO/",[101,95],"cve.org",[103,104],"Vendor Advisory","X Refsource FEDORA",{"url":106,"sources":107,"tags":108},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CT3WTR4P5VAJ3GJGKPYEDUPTNZ3IEDUR/",[101,95],[103,104],{"url":110,"sources":111,"tags":112},"https://access.redhat.com/errata/RHSA-2020:0573",[101,95],[103,113,114],"X Refsource REDHAT","Third Party Advisory",{"url":116,"sources":117,"tags":118},"https://access.redhat.com/errata/RHSA-2020:0579",[101,95],[103,113,114],{"url":120,"sources":121,"tags":122},"https://access.redhat.com/errata/RHSA-2020:0597",[101,95],[103,113,114],{"url":124,"sources":125,"tags":126},"https://access.redhat.com/errata/RHSA-2020:0598",[101,95],[103,113,114],{"url":128,"sources":129,"tags":130},"https://access.redhat.com/errata/RHSA-2020:0602",[101,95],[103,113,114],{"url":132,"sources":133,"tags":134},"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00008.html",[101,95],[103,135,136,114],"X Refsource SUSE","Mailing List",{"url":138,"sources":139,"tags":140},"https://access.redhat.com/errata/RHSA-2020:0703",[101,95],[103,113,114],{"url":142,"sources":143,"tags":144},"https://access.redhat.com/errata/RHSA-2020:0707",[101,95],[103,113,114],{"url":146,"sources":147,"tags":148},"https://access.redhat.com/errata/RHSA-2020:0708",[101,95],[103,113,114],{"url":150,"sources":151,"tags":152},"https://security.gentoo.org/glsa/202003-48",[101,95],[103,153,114],"X Refsource GENTOO",{"url":155,"sources":156,"tags":157},"https://www.debian.org/security/2020/dsa-4669",[101,95],[103,158,114],"X Refsource DEBIAN",{"url":160,"sources":161,"tags":162},"https://www.oracle.com/security-alerts/cpuapr2020.html",[101,95],[163,164,114],"X Refsource MISC","Patch",{"url":166,"sources":167,"tags":168},"https://www.oracle.com//security-alerts/cpujul2021.html",[101,95],[163,164,114],{"url":170,"sources":171,"tags":172},"https://nodejs.org/en/blog/release/v13.8.0/",[101,95],[173,103],"X Refsource CONFIRM",{"url":175,"sources":176,"tags":177},"https://nodejs.org/en/blog/vulnerability/february-2020-security-releases/",[101,95],[173,103],{"url":179,"sources":180,"tags":181},"https://nodejs.org/en/blog/release/v10.19.0/",[101,95],[173,182,103],"Release Notes",{"url":184,"sources":185,"tags":186},"https://nodejs.org/en/blog/release/v12.15.0/",[101,95],[173,182,103],{"url":188,"sources":189,"tags":190},"https://security.netapp.com/advisory/ntap-20200221-0004/",[101,95],[173,114],{"url":192,"sources":193,"tags":194},"https://hackerone.com/reports/735748",[101,95],[163,195,114],"Permissions Required",[],{"date":198,"score":91,"percentile":199},"2026-06-04",0.96927,[201,204,207,210,213,215,218,220,223,226,229,232,235,237,239,243,246,249,252,255,258,261,264,267,270,273,275,277,281,283,285,287,290,292,294,296,299,302,305,308,311,313,316,319,322,325,327,330,332,334,336,339,342,345,348,350,352,354,357,360,362,365,367,370,373,376,379,382,385,387,389,392,395,398,401,404,407,409,412,415,418,421,424,427,429,432,435,438,440,443],{"date":202,"score":91,"percentile":203},"2025-11-04",0.9662,{"date":205,"score":91,"percentile":206},"2025-11-05",0.96619,{"date":208,"score":91,"percentile":209},"2025-11-06",0.96622,{"date":211,"score":91,"percentile":212},"2025-11-07",0.96625,{"date":214,"score":91,"percentile":212},"2025-11-08",{"date":216,"score":91,"percentile":217},"2025-11-09",0.96624,{"date":219,"score":91,"percentile":212},"2025-11-10",{"date":221,"score":91,"percentile":222},"2025-11-11",0.96626,{"date":224,"score":91,"percentile":225},"2025-11-12",0.96629,{"date":227,"score":91,"percentile":228},"2025-11-13",0.96631,{"date":230,"score":91,"percentile":231},"2025-11-14",0.96632,{"date":233,"score":91,"percentile":234},"2025-11-15",0.9663,{"date":236,"score":91,"percentile":234},"2025-11-16",{"date":238,"score":91,"percentile":231},"2025-11-17",{"date":240,"score":241,"percentile":242},"2025-11-18",0.58073,0.98123,{"date":244,"score":241,"percentile":245},"2025-11-19",0.98125,{"date":247,"score":241,"percentile":248},"2025-11-20",0.98126,{"date":250,"score":91,"percentile":251},"2025-11-21",0.9664,{"date":253,"score":91,"percentile":254},"2025-11-22",0.96639,{"date":256,"score":91,"percentile":257},"2025-11-23",0.96638,{"date":259,"score":91,"percentile":260},"2025-11-24",0.96643,{"date":262,"score":91,"percentile":263},"2025-11-25",0.96644,{"date":265,"score":91,"percentile":266},"2025-11-26",0.96646,{"date":268,"score":91,"percentile":269},"2025-11-27",0.96647,{"date":271,"score":91,"percentile":272},"2025-11-28",0.96645,{"date":274,"score":91,"percentile":263},"2025-11-29",{"date":276,"score":91,"percentile":269},"2025-11-30",{"date":278,"score":279,"percentile":280},"2025-12-01",0.43322,0.97372,{"date":282,"score":279,"percentile":280},"2025-12-02",{"date":284,"score":279,"percentile":280},"2025-12-03",{"date":286,"score":91,"percentile":266},"2025-12-04",{"date":288,"score":91,"percentile":289},"2025-12-05",0.96648,{"date":291,"score":91,"percentile":289},"2025-12-06",{"date":293,"score":91,"percentile":289},"2025-12-07",{"date":295,"score":91,"percentile":289},"2025-12-08",{"date":297,"score":91,"percentile":298},"2025-12-09",0.9665,{"date":300,"score":91,"percentile":301},"2025-12-10",0.96654,{"date":303,"score":91,"percentile":304},"2025-12-11",0.96657,{"date":306,"score":91,"percentile":307},"2025-12-12",0.96659,{"date":309,"score":91,"percentile":310},"2025-12-13",0.96658,{"date":312,"score":91,"percentile":307},"2025-12-14",{"date":314,"score":91,"percentile":315},"2025-12-15",0.9666,{"date":317,"score":91,"percentile":318},"2025-12-16",0.96662,{"date":320,"score":91,"percentile":321},"2025-12-17",0.96664,{"date":323,"score":91,"percentile":324},"2025-12-18",0.96665,{"date":326,"score":91,"percentile":324},"2025-12-19",{"date":328,"score":91,"percentile":329},"2025-12-20",0.96666,{"date":331,"score":91,"percentile":324},"2025-12-21",{"date":333,"score":91,"percentile":329},"2025-12-22",{"date":335,"score":91,"percentile":321},"2025-12-23",{"date":337,"score":91,"percentile":338},"2025-12-24",0.96667,{"date":340,"score":91,"percentile":341},"2025-12-25",0.96672,{"date":343,"score":91,"percentile":344},"2025-12-26",0.9667,{"date":346,"score":91,"percentile":347},"2025-12-27",0.96698,{"date":349,"score":91,"percentile":344},"2025-12-28",{"date":351,"score":91,"percentile":344},"2025-12-29",{"date":353,"score":91,"percentile":341},"2025-12-30",{"date":355,"score":91,"percentile":356},"2025-12-31",0.96676,{"date":358,"score":279,"percentile":359},"2026-01-01",0.97401,{"date":361,"score":279,"percentile":359},"2026-01-02",{"date":363,"score":279,"percentile":364},"2026-01-03",0.974,{"date":366,"score":91,"percentile":356},"2026-01-04",{"date":368,"score":91,"percentile":369},"2026-01-05",0.96677,{"date":371,"score":91,"percentile":372},"2026-01-06",0.96678,{"date":374,"score":91,"percentile":375},"2026-01-07",0.96679,{"date":377,"score":91,"percentile":378},"2026-01-08",0.96682,{"date":380,"score":91,"percentile":381},"2026-01-09",0.96684,{"date":383,"score":91,"percentile":384},"2026-01-10",0.96685,{"date":386,"score":91,"percentile":384},"2026-01-11",{"date":388,"score":91,"percentile":384},"2026-01-12",{"date":390,"score":91,"percentile":391},"2026-01-13",0.96686,{"date":393,"score":91,"percentile":394},"2026-01-14",0.96689,{"date":396,"score":91,"percentile":397},"2026-01-15",0.9669,{"date":399,"score":91,"percentile":400},"2026-01-16",0.96692,{"date":402,"score":91,"percentile":403},"2026-01-17",0.96694,{"date":405,"score":91,"percentile":406},"2026-01-18",0.96695,{"date":408,"score":91,"percentile":406},"2026-01-19",{"date":410,"score":91,"percentile":411},"2026-01-20",0.96696,{"date":413,"score":91,"percentile":414},"2026-01-21",0.96697,{"date":416,"score":91,"percentile":417},"2026-01-22",0.96699,{"date":419,"score":91,"percentile":420},"2026-01-23",0.96704,{"date":422,"score":91,"percentile":423},"2026-01-24",0.96706,{"date":425,"score":91,"percentile":426},"2026-01-25",0.96708,{"date":428,"score":91,"percentile":426},"2026-01-26",{"date":430,"score":91,"percentile":431},"2026-01-27",0.96707,{"date":433,"score":91,"percentile":434},"2026-01-28",0.96709,{"date":436,"score":91,"percentile":437},"2026-01-29",0.9671,{"date":439,"score":91,"percentile":434},"2026-01-30",{"date":441,"score":91,"percentile":442},"2026-01-31",0.96711,{"date":444,"score":279,"percentile":445},"2026-02-01",0.97425,[447],{"source":95,"cvss_v2_0":448,"cvss_v3_0":9,"cvss_v3_1":453,"cvss_v4_0":9},{"baseScore":449,"baseSeverity":9,"vectorString":450,"impactScore":451,"exploitabilityScore":452},7.5,"AV:N/AC:L/Au:N/C:P/I:P/A:P",6.4,10,{"baseScore":93,"baseSeverity":454,"vectorString":96,"impactScore":93,"exploitabilityScore":452},"CRITICAL",[456,465,471,518,530,536,544,550,555,569,574,582,590,595],{"ecosystem":9,"name":457,"vendor":458,"product":459,"cpe_part":460,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":461},"debian linux","debian","debian_linux","o",[462],{"version":463,"is_range":89,"range_type":464,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.0","cpe",{"ecosystem":9,"name":466,"vendor":467,"product":466,"cpe_part":460,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":468},"fedora","fedoraproject",[469],{"version":470,"is_range":89,"range_type":464,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"30",{"ecosystem":9,"name":472,"vendor":473,"product":472,"cpe_part":474,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":475},"node","nodejs","a",[476,483,487,491,495,499,503,506,510,514],{"version":477,"is_range":478,"range_type":101,"version_start":479,"version_start_type":480,"version_end":481,"version_end_type":482,"fixed_in":9},">= 4.0, \u003C 4.*",true,"4.0","including","4.*","excluding",{"version":484,"is_range":478,"range_type":101,"version_start":485,"version_start_type":480,"version_end":486,"version_end_type":482,"fixed_in":9},">= 5.0, \u003C 5.*","5.0","5.*",{"version":488,"is_range":478,"range_type":101,"version_start":489,"version_start_type":480,"version_end":490,"version_end_type":482,"fixed_in":9},">= 6.0, \u003C 6.*","6.0","6.*",{"version":492,"is_range":478,"range_type":101,"version_start":493,"version_start_type":480,"version_end":494,"version_end_type":482,"fixed_in":9},">= 7.0, \u003C 7.*","7.0","7.*",{"version":496,"is_range":478,"range_type":101,"version_start":497,"version_start_type":480,"version_end":498,"version_end_type":482,"fixed_in":9},">= 8.0, \u003C 8.*","8.0","8.*",{"version":500,"is_range":478,"range_type":101,"version_start":501,"version_start_type":480,"version_end":502,"version_end_type":482,"fixed_in":9},">= 9.0, \u003C 9.*","9.0","9.*",{"version":504,"is_range":478,"range_type":101,"version_start":463,"version_start_type":480,"version_end":505,"version_end_type":482,"fixed_in":9},">= 10.0, \u003C 10.19.0","10.19.0",{"version":507,"is_range":478,"range_type":101,"version_start":508,"version_start_type":480,"version_end":509,"version_end_type":482,"fixed_in":9},">= 11.0, \u003C 11.*","11.0","11.*",{"version":511,"is_range":478,"range_type":101,"version_start":512,"version_start_type":480,"version_end":513,"version_end_type":482,"fixed_in":9},">= 12.0, \u003C 12.15.0","12.0","12.15.0",{"version":515,"is_range":478,"range_type":101,"version_start":516,"version_start_type":480,"version_end":517,"version_end_type":482,"fixed_in":9},">= 13.0, \u003C 13.8.0","13.0","13.8.0",{"ecosystem":9,"name":519,"vendor":473,"product":519,"cpe_part":474,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":520},"node.js",[521,524,527],{"version":522,"is_range":478,"range_type":464,"version_start":523,"version_start_type":480,"version_end":505,"version_end_type":482,"fixed_in":9},"gte10.0.0_lt10.19.0","10.0.0",{"version":525,"is_range":478,"range_type":464,"version_start":526,"version_start_type":480,"version_end":513,"version_end_type":482,"fixed_in":9},"gte12.0.0_lt12.15.0","12.0.0",{"version":528,"is_range":478,"range_type":464,"version_start":529,"version_start_type":480,"version_end":517,"version_end_type":482,"fixed_in":9},"gte13.0.0_lt13.8.0","13.0.0",{"ecosystem":9,"name":531,"vendor":532,"product":531,"cpe_part":460,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":533},"leap","opensuse",[534],{"version":535,"is_range":89,"range_type":464,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"15.1",{"ecosystem":9,"name":537,"vendor":538,"product":537,"cpe_part":474,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":539},"graalvm","oracle",[540,542],{"version":541,"is_range":89,"range_type":464,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"19.3.1",{"version":543,"is_range":89,"range_type":464,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"20.0.0",{"ecosystem":9,"name":545,"vendor":546,"product":547,"cpe_part":460,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":548},"enterprise linux","redhat","enterprise_linux",[549],{"version":497,"is_range":89,"range_type":464,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":551,"vendor":546,"product":552,"cpe_part":460,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":553},"enterprise linux desktop","enterprise_linux_desktop",[554],{"version":493,"is_range":89,"range_type":464,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":556,"vendor":546,"product":557,"cpe_part":460,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":558},"enterprise linux eus","enterprise_linux_eus",[559,561,563,565,567],{"version":560,"is_range":89,"range_type":464,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.7",{"version":562,"is_range":89,"range_type":464,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8.1",{"version":564,"is_range":89,"range_type":464,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8.2",{"version":566,"is_range":89,"range_type":464,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8.4",{"version":568,"is_range":89,"range_type":464,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8.6",{"ecosystem":9,"name":570,"vendor":546,"product":571,"cpe_part":460,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":572},"enterprise linux server","enterprise_linux_server",[573],{"version":493,"is_range":89,"range_type":464,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":575,"vendor":546,"product":576,"cpe_part":460,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":577},"enterprise linux server aus","enterprise_linux_server_aus",[578,579,580,581],{"version":560,"is_range":89,"range_type":464,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":564,"is_range":89,"range_type":464,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":566,"is_range":89,"range_type":464,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":568,"is_range":89,"range_type":464,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":583,"vendor":546,"product":584,"cpe_part":460,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":585},"enterprise linux server tus","enterprise_linux_server_tus",[586,587,588,589],{"version":560,"is_range":89,"range_type":464,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":564,"is_range":89,"range_type":464,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":566,"is_range":89,"range_type":464,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":568,"is_range":89,"range_type":464,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":591,"vendor":546,"product":592,"cpe_part":460,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":593},"enterprise linux workstation","enterprise_linux_workstation",[594],{"version":493,"is_range":89,"range_type":464,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":596,"vendor":546,"product":597,"cpe_part":474,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":598},"software collections","software_collections",[599],{"version":600,"is_range":89,"range_type":464,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"1.0"]