14 matches found
compression vulnerable to Denial of Service via memory leak on premature response close
Impact A vulnerability in compression 1.8.2 allows an attacker to trigger a Denial of Service DoS by disconnecting while a compressed response is being sent. When the client aborts the connection before the response finishes, the zlib stream created to compress that response is never destroyed, s...
GHSA-VC2V-76PW-4V95 compression vulnerable to Denial of Service via memory leak on premature response close
Impact A vulnerability in compression 1.8.2 allows an attacker to trigger a Denial of Service DoS by disconnecting while a compressed response is being sent. When the client aborts the connection before the response finishes, the zlib stream created to compress that response is never destroyed, s...
CVE-2026-13608
A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker executing a Man-in-the-Middle MITM attack can inject a premature or shortcut response that bypasses complete peer...
nodejs: Node.js HTTP Agent: Information disclosure due to premature response acceptance
A flaw was found in Node.js HTTP Agent. This vulnerability allows a client to accept a server response as valid even before the client has sent its request. This can lead to unexpected behavior and potentially information disclosure...
nodejs: Node.js HTTP Agent: Information disclosure due to premature response acceptance
A flaw was found in Node.js HTTP Agent. This vulnerability allows a client to accept a server response as valid even before the client has sent its request. This can lead to unexpected behavior and potentially information disclosure...
nodejs: Node.js HTTP Agent: Information disclosure due to premature response acceptance
A flaw was found in Node.js HTTP Agent. This vulnerability allows a client to accept a server response as valid even before the client has sent its request. This can lead to unexpected behavior and potentially information disclosure...
nodejs: Node.js HTTP Agent: Information disclosure due to premature response acceptance
A flaw was found in Node.js HTTP Agent. This vulnerability allows a client to accept a server response as valid even before the client has sent its request. This can lead to unexpected behavior and potentially information disclosure...
nodejs: Node.js HTTP Agent: Information disclosure due to premature response acceptance
A flaw was found in Node.js HTTP Agent. This vulnerability allows a client to accept a server response as valid even before the client has sent its request. This can lead to unexpected behavior and potentially information disclosure...
nodejs: Node.js HTTP Agent: Information disclosure due to premature response acceptance
A flaw was found in Node.js HTTP Agent. This vulnerability allows a client to accept a server response as valid even before the client has sent its request. This can lead to unexpected behavior and potentially information disclosure...
nodejs: Node.js HTTP Agent: Information disclosure due to premature response acceptance
A flaw was found in Node.js HTTP Agent. This vulnerability allows a client to accept a server response as valid even before the client has sent its request. This can lead to unexpected behavior and potentially information disclosure...
nodejs: Node.js HTTP Agent: Information disclosure due to premature response acceptance
A flaw was found in Node.js HTTP Agent. This vulnerability allows a client to accept a server response as valid even before the client has sent its request. This can lead to unexpected behavior and potentially information disclosure...
BIT-NODE-MIN-2026-48931
A flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before the client has sent the request. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...
AZL-91206 CVE-2026-48931 affecting package nodejs for versions less than 24.17.0-1
A flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before the client has sent the request. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...
CVE-2026-48931
A flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before the client has sent the request. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...