[{"CVE":"CVE-2019-15605","severity":"important","public_date":"2020-02-07T00:00:00Z","advisories":["RHSA-2020:0573","RHSA-2020:1510","RHSA-2020:0597","RHSA-2020:0708","RHSA-2020:0707","RHSA-2020:0602","RHSA-2020:0703","RHSA-2020:0598","RHSA-2020:0579"],"bugzilla":"1800364","bugzilla_description":"CVE-2019-15605 nodejs: HTTP request smuggling using malformed Transfer-Encoding header","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-444","affected_packages":["nodejs:12-8010020200220143053.c27ad7f8","http-parser-0:2.7.1-8.el7_7.2","rh-nodejs12-nodejs-0:12.16.1-1.el7","http-parser-0:2.8.0-2.el8_0.2","rh-nodejs10-nodejs-0:10.19.0-1.el7","nodejs:10-8010020200213140254.c27ad7f8","http-parser-0:2.8.0-5.el8_1.2","http-parser-0:2.7.1-5.el7_6.1","nodejs:10-8000020200214110450.f8e95b4e"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-15605.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2018-12121","severity":"moderate","public_date":"2018-11-27T00:00:00Z","advisories":["RHSA-2019:3497","RHSA-2019:2258","RHSA-2019:1821","RHSA-2019:2939"],"bugzilla":"1661002","bugzilla_description":"CVE-2018-12121 nodejs: Denial of Service with large HTTP headers","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["http-parser-0:2.8.0-5.el8","http-parser-0:2.7.1-8.el7","rh-nodejs8-nodejs-0:8.16.0-1.el7","rh-nodejs10-nodejs-0:10.16.3-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12121.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2018-7159","severity":"low","public_date":"2018-03-08T00:00:00Z","advisories":["RHSA-2018:2949","RHSA-2019:2258"],"bugzilla":"1561981","bugzilla_description":"CVE-2018-7159 nodejs: HTTP parser allowed for spaces inside Content-Length header values","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs8-nodejs-0:8.11.4-1.el7","http-parser-0:2.7.1-8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7159.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3_score":"5.3"}]