PT-2020-5094

CVE-2020-8251

Published

2020-09-16

Updated

2026-10-31

Description by

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Node.js versions prior to 14.11.0

Description The issue is related to an error in handling HTTP header names, which can be exploited by a remote attacker to cause a denial of service (DoS). This can make the server unable to accept new connections due to delayed requests submission.

Recommendations For Node.js versions prior to 14.11.0, update to version 14.11.0 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Matteo Collina

Paolo Insogna

Vendors

Affected products

Weakness enumeration

CWE-400: Uncontrolled Resource Consumption

Related identifiers