Denial of Service via `proto` header name in `req.headersDistinct` (Uncaught `TypeError` crashes Node.js process)

Disclosed: 2026-03-30 16:42:13 By yushengchen To nodejs

High

Vulnerability Details

No vulnerability description provided or it is restricted.

Actions

View on HackerOne

Report Stats

Report ID: 3560402
State: Closed
Substate: resolved
Upvotes: 1

Share this report