CVE-2026-123874

A use-after-free in Node.js HTTP/2 lets an unauthenticated client corr...