CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Mend•added 2026/08/04 3:57 p.m.•6 views

CVE-2026-56848

A flaw in Node.js HTTP/2 handling allows "nghttp2sessionmemsend" to be called re-entrantly while "nghttp2sessionmemrecv" is executing, resulting in a heap-use-after-free. This vulnerability affects Node.js 26.x, 24.x, and 22.x...

8.7CVSS7AI score0.0049EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2026/08/04 12:00 a.m.•5 views

CVE-2026-56848: Use After Free

A flaw in Node.js HTTP/2 handling allows nghttp2sessionmemsend to be called re-entrantly while nghttp2sessionmemrecv is executing, resulting in a heap-use-after-free. This vulnerability affects Node.js 26.x, 24.x, and 22.x...

7.5CVSS7.1AI score0.0049EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by