pimterry

Node.js is vulnerable to a remotely triggerable uncaught exception in TLS servers via deferred handshake callbacks

Node.js is vulnerable to a client certificate authentication bypass via TLS 1.2 renegotiation servername change

Node.js is vulnerable to a per-host mTLS authorization bypass via a CA-only SNI context failing open to the default CA

Node.js is vulnerable to an HTTP/2 memory and file-descriptor leak via a protocol error during session shutdown

Node.js is vulnerable to cross-connection memory disclosure via TLS write re-entrancy in the HTTPS request parser

Node.js is vulnerable to a remote HTTP/2 denial of service via a reachable assertion in Http2Session teardown

Node.js is vulnerable to a heap buffer overflow in HTTP/2 session.altsvc() via a long origin