Threats tagged 'bit-node-2026-21714'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.5%	CVE-2026-21714Node.js HTTP/2 servers · Memory Leak Occurs Medium5.3EPSS 0.5%2026-04-06GCVE DatabaseCVE-2026-21714 A memory leak vulnerability exists in Node.js HTTP/2 servers when a client sends WINDOW_UPDATE frames on stream 0 that cause the flow control window to exceed the maximum allowed value. Although the server responds with a GOAWAY frame, the associated Http2Session object is not properly cleaned up, leading to resource leakage. This affects multiple Node.js versions including 20, 21, 23, and 25 within specified version ranges. EPSS 0.5%Report on CVE-2026-21714 Vulnerability #bit-node-2026-21714 #bitnami	GCVE Database	2026-04-06

Page 1 of 1