Threats tagged 'ghsa-vgqh-cxw6-x64x'

A use-after-free vulnerability exists in Node.js HTTP/2 when serving files using respondWithFile() or respondWithFD(). An unauthenticated client can cause the server to free an Http2Stream object while a write operation referencing it is still queued, leading to a dereference of freed memory. This affects Node.js versions 26.x starting from 26.9.0 and 24.x starting from 24.22.0. The vulnerability can be triggered over both TLS and cleartext connections.