{ "cve": [ "CVE-2023-30589" ], "vulnerable": "16.x || 18.x || 20.x", "patched": "^16.20.1 || ^18.16.1 || ^20.3.1", "ref": "https://nodejs.org/en/blog/vulnerability/june-2023-security-releases/", "overview": "The llhttp parser in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests.", "affectedEnvironments": [ "all" ], "severity": "medium" }