Keep-alive socket process a response that was written before the request was sent

业务逻辑 / TOCTOU 竞态条件 / #4038361

厂商

Node.js

严重程度

低危 · CVSS 6.5

赏金

—

弱点

TOCTOU 竞态条件

研究员

@hasanfleyah

披露日期

2026-10-23

资产

https://github.com/nodejs/node

CVE

CVE-2026-105481

该报告还没有中文解读。