Memory leak in Node.js HTTP/2 server via WINDOW_UPDATE on stream 0 leads to resource exhaustion

Disclosed: 2026-03-30 16:41:57 By galbarnahum To nodejs

Medium

Vulnerability Details

No vulnerability description provided or it is restricted.

Actions

View on HackerOne

Report Stats

Report ID: 3531737
State: Closed
Substate: resolved

Share this report