CVE-2026-56846

Опубликовано: 04 авг. 2026

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memory exhaustion.

This vulnerability affects Node.js 24.x and 22.x.

Ссылки

https://nodejs.org/en/blog/vulnerability/july-2026-security-releases

EPSS

Процентиль: 43%

0.00548

Низкий

7.5 High

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVE-2026-56846

CVSS3: 7.5

ubuntu

4 дня назад

A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memory exhaustion. This vulnerability affects Node.js **24.x** and **22.x**.

CVE-2026-56846

CVSS3: 7.5

debian

4 дня назад

A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blo ...

GHSA-frc8-j9wv-2348

CVSS3: 7.5

github

3 дня назад

A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memory exhaustion. This vulnerability affects Node.js **24.x** and **22.x**.

EPSS

Процентиль: 43%

0.00548

Низкий

7.5 High

CVSS3

Дефекты

CWE-400