Memory leak in Node.js HTTP/2 server via WINDOW_UPDATE on stream 0 leads to resource exhaustion

内存破坏 / Missing Release of Memory after Effective Lifetime / #3531737

厂商

Node.js

严重程度

低危 · CVSS 5.3

赏金

—

弱点

Missing Release of Memory after Effective Lifetime

研究员

@galbarnahum

披露日期

2026-03-30

资产

https://github.com/nodejs/node

CVE

CVE-2026-21714

该报告还没有中文解读。