mcollina

Node.js is vulnerable to a certificate validation bypass in https.Agent via cross-policy TLS session reuse

Node.js is vulnerable to an HTTP/2 denial of service via a NULL pointer dereference when a respondWithFile() download is cancelled

Node.js is vulnerable to an HTTP/2 use-after-free via respondWithFile() stream reset during a pending write

Node.js is vulnerable to proxy credential disclosure via ERR_PROXY_INVALID_CONFIG error messages

Node.js is vulnerable to an HTTP/2 memory exhaustion denial of service via unaccounted inbound DATA on an undrained stream

Node.js is vulnerable to a per-host mTLS authorization bypass via a CA-only SNI context failing open to the default CA

Node.js is vulnerable to HTTP/2 response memory disclosure via a use-after-free during stream teardown

Node.js is vulnerable to an HTTP/2 memory and file-descriptor leak via a protocol error during session shutdown

Node.js is vulnerable to cross-connection memory disclosure via TLS write re-entrancy in the HTTPS request parser

Node.js is vulnerable to a remote HTTP/2 denial of service via a reachable assertion in Http2Session teardown