CVE-2026-48619

CVE-2026-48619 describes unbounded memory growth in Node.js HTTP/2 clients caused by attacker-controlled ORIGIN frames, leading to Out-of-Memory on the client. Affected releases: Node.js 22, 24, and 26. The vulnerability is referenced in the openSUSE/SUSE patch SUSE-SU-2026-2633-1, which updates ...