Unknown · On-Headers · CVE-2025-7339
**Name of the Vulnerable Software and Affected Versions**
on-headers versions prior to 1.1.0
**Description**
on-headers is a Node.js middleware used for listening to response headers. A flaw in versions prior to 1.1.0 may allow unintended modification of response headers when an array is passed to `response.writeHead()`.
**Recommendations**
Upgrade to version 1.1.0.
As a workaround, pass an object to `response.writeHead()` instead of an array.