Search: CVE-2026-42772

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.5%	CVE-2026-42772Issue summary · The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order Medium5.3EPSS 0.5%2026-09-29GCVE DatabaseCVE-2026-42772 A performance degradation vulnerability exists in Node.js's QUIC stream reassembly algorithm, where out-of-order packets cause progressively worse performance with quadratic complexity. This can be exploited by a remote QUIC peer to cause CPU resource exhaustion and potential denial of service with low bandwidth. The issue affects multiple specific Node.js versions and has a CVSS score of 5.3 (low severity). A patch is available. EPSS 0.5%Vulnerability CWE-407 #ghsa-5r49-x3jp-qp9h	GCVE Database	2026-09-29

Page 1 of 1