CVE-2026-97705 Moleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parser

Moleculer is a progressive microservices framework for Node.js. Prior to 0.14.36 and 0.15.2, Parser.write in src/transporters/tcp/parser.js used Buffer.prototype.readInt32BE to read a signed packet length, so a remote unauthenticated peer could supply a negative value that caused packet.sliceleng...