CVE-2024-27983-nodejs-http2

Этот репозиторий создаёт уязвимый HTTP2-сервер на Node.js server-nossl.js на основе CVE-2024-27983, который эксплуатирует уязвимость типа continuation flood в HTTP2-серверах. Примечания: server.js признан не уязвимым благодаря использованию SSL-сертификатов. server-nossl.js уязвим к атаке...

Linux Distros Unpatched Vulnerability : CVE-2026-56848

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in Node.js HTTP/2 handling allows nghttp2sessionmemsend to be called re-entrantly while nghttp2sessionmemrecv is executing, resulting in a...

CVE-2026-48937

A flaw in Node.js HTTP/2 server API can cause servers to keep accepting data even after sending a GOAWAY frame. This vulnerability affects two supported release lines: Node.js 22 and Node.js 24...