CVE-2016-2086

HIGH · CVSS 7.5 EPSS 6.26%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-04-07 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2016-2086

Severity

HIGH

CVSS

7.5

EPSS

6.26%

Original Filing — NVD Description

Node.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allow remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.