CRITICAL9.1npm
GHSA-5689-v88g-g6rv· BIT-node-2022-32213, BIT-node-min-2022-32213llhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding
Modified: 9/10/2026
package
npm/llhttp
pkg:npm/llhttp
HIGH7.5npm
GHSA-cggh-pq45-6h9x· BIT-node-2023-30589, BIT-node-min-2023-30589llhttp vulnerable to HTTP request smuggling
Modified: 9/10/2026
CRITICAL9.1npm
GHSA-q5vx-44v4-gch4· BIT-node-2022-32214, BIT-node-min-2022-32214llhttp allows HTTP Request Smuggling via Improper Delimiting of Header Fields
Modified: 9/10/2026