CVE

Id
92144  
CVE No.
CVE-2016-5325  
Status
Candidate  
Description
CRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the reason argument.  
Phase
Assigned (20160607)  
Votes
None (candidate not yet proposed)  
Comments