Threats tagged 'ghsa-j65r-8hrg-qc6x'

CVE-2024-27983 is a high-severity vulnerability in the Node.js HTTP/2 server where an attacker can cause a denial of service by sending a small number of specially crafted HTTP/2 frames. The issue arises from a race condition in the nghttp2 library when header frames with CONTINUATION frames are processed and the TCP connection is abruptly closed, leaving data in memory and triggering the Http2Session destructor prematurely.