Node.js < 22.23.5, < 24.22.3, < 26.13.1 - NULL Pointer Dereference in StreamPipe Teardown When a respondWithFile() Download Is Cancelled leading to Remote Process Abort

NULL Pointer Dereference in StreamPipe Teardown When a respondWithFile Download Is Cancelled leading to Remote Process Abort vulnerability discovered by ? in WordPress npm Node.js versions 26.13.1...

Node.js < 24.22.3, < 26.13.1 - Reachable Assertion in HTTP/2 Session Teardown via Streams Retaining nghttp2 Header Buffers leading to Remote Process Abort

Reachable Assertion in HTTP/2 Session Teardown via Streams Retaining nghttp2 Header Buffers leading to Remote Process Abort vulnerability discovered by ? in WordPress npm Node.js versions 26.13.1...