CVE-2024-27983-nodejs-http2

Este repositorio crea un servidor Node.js HTTP2 vulnerable server-nossl.js basado en CVE-2024-27983, el cual explota una vulnerabilidad de inundación de continuación en servidores HTTP2. Notas: server.js no es vulnerable debido al uso de certificados SSL. server-nossl.js es vulnerable al ataque d...

Linux Distros Unpatched Vulnerability : CVE-2026-56848

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in Node.js HTTP/2 handling allows nghttp2sessionmemsend to be called re-entrantly while nghttp2sessionmemrecv is executing, resulting in a...

CVE-2026-48937

A flaw in Node.js HTTP/2 server API can cause servers to keep accepting data even after sending a GOAWAY frame. This vulnerability affects two supported release lines: Node.js 22 and Node.js 24...