UBUNTU-CVE-2026-56848

A flaw in Node.js HTTP/2 handling allows nghttp2sessionmemsend to be called re-entrantly while nghttp2sessionmemrecv is executing, resulting in a heap-use-after-free. This vulnerability affects Node.js 26.x, 24.x, and 22.x...

BELL-CVE-2026-56848

Bulletin has no description...

CVE-2026-56848

creationtimestamp| type| source ---|---|--- 2026-07-29 15:29:55+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrsakcypyy2r 2026-07-30 04:46:32+00:00| seen| https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities20260730 2026-07-30 14:15:24+00:00| seen|...