https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 11 Nov 2026 23:51:49 +0000 https://db.gcve.eu/vuln/cve-2026-123866 <p><strong>Affected:</strong> nodejs node</p> <p>A use-after-free in Node.js HTTP/2 stream teardown can leak response memory, including the contents of other connections&#39; response buffers, to a peer. When a stream is torn down while a write is still backpressured, for example by a peer RST_STREAM or by the server&#39;s own per-stream timeout destroying the stream, the stream&#39;s response buffer is freed but a reference to it is still used, so freed or unrelated heap memory is written to the socket instead of the intended response. On Node.js 26.x and 24.x the teardown can be driven purely by a remote peer once the window-size change from 26.9.0 and 24.22.0 is present, and on all supported lines the same defect is reachable through an application-initiated teardown such as a per-stream idle timeout. This vulnerability affects Node.js 26.x, 24.x, and 22.x.</p> <p><strong>Affected:</strong> nodejs node</p> <p>A use-after-free in Node.js HTTP/2 stream teardown can leak response memory, including the contents of other connections&#39; response buffers, to a peer. When a stream is torn down while a write is still backpressured, for example by a peer RST_STREAM or by the server&#39;s own per-stream timeout destroying the stream, the stream&#39;s response buffer is freed but a reference to it is still used, so freed or unrelated heap memory is written to the socket instead of the intended response. On Node.js 26.x and 24.x the teardown can be driven purely by a remote peer once the window-size change from 26.9.0 and 24.22.0 is present, and on all supported lines the same defect is reachable through an application-initiated teardown such as a per-stream idle timeout. This vulnerability affects Node.js 26.x, 24.x, and 22.x.</p> https://db.gcve.eu/vuln/cve-2026-123866