Search: CVE-2026-21714

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.5%	CVE-2026-21714nodejs node · Memory Leak Medium5.3EPSS 0.5%2026-03-30CVE Database V5CVE-2026-21714 A memory leak vulnerability exists in Node.js HTTP/2 servers when clients send WINDOW_UPDATE frames on stream 0 that cause the flow control window to exceed the maximum allowed value. Although the server sends a GOAWAY frame correctly, the associated Http2Session object is not cleaned up, leading to resource leakage. This affects Node.js versions 20.20.1, 22.22.1, 24.14. EPSS 0.5%Vulnerability CWE-401	CVE Database V5	2026-03-30

Page 1 of 1 · 1 duplicate CVE record merged