2026年9月4日

CVE-2026-56846 [HIGH] – A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSession

未分类

📑 文章目录

A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memory exhaustion.

This vulnerability affects Node.js **24.x** and **22.x**.

相关文章