Skip to content

Commit 398a189

Browse files
committed
Revert "Blog: fix CVE ID for writeHead() bug / CVE-2016-5326"
1 parent 8ae61ac commit 398a189

File tree

1 file changed

+1
-3
lines changed

1 file changed

+1
-3
lines changed

locale/en/blog/vulnerability/september-2016-security-releases.md

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -35,9 +35,7 @@ Originally reported by Alexander Minozhenko and James Bunton (Atlassian).
3535

3636
All versions of Node.js are **affected**.
3737

38-
### CVE-2016-5326: `reason` argument in `ServerResponse#writeHead()` not properly validated
39-
40-
***Update 1-Oct-2016: this was originally reported as CVE-2016-5325, it has been updated with the correct ID, CVE-2016-5326***
38+
### CVE-2016-5325: `reason` argument in `ServerResponse#writeHead()` not properly validated
4139

4240
This is a low severity security defect that that may make [HTTP response splitting](https://en.wikipedia.org/wiki/HTTP_response_splitting) possible under certain circumstances. If user-input is passed to the `reason` argument to `writeHead()` on an HTTP response, a new-line character may be used to inject additional responses.
4341

0 commit comments

Comments
 (0)