#http2 — Public Fediverse posts

Node.js Patches Flaws That Crash Servers and Leak Data

Node.js has released crucial security patches to fix flaws that could crash servers and leak sensitive data, including TLS private keys and other users' requests, affecting specific release lines. The updates, now available, address vulnerabilities that allowed unauthenticated clients to trigger crashes and memory disclosures over HTTP/2 connections.

https://osintsights.com/nodejs-patches-flaws-that-crash-servers-and-leak-data?utm_source=mastodon&utm_medium=social

#Nodejs #Cve2026123863 #Cve2026123866 #Http2 #SupplyChain

Node.js has released security updates addressing 16 vulnerabilities affecting its built-in HTTP/2, HTTPS, and TLS software, with seven issues rated as high severity.

The fixes arrive in versions 22.23.5, 24.22.3, and 26.13.1.

The flaws include memory disclosures and potential server crashes, though no active exploitation has been reported.

Older versions that have reached end-of-life do not receive patches.

https://en.hacks.gr/epeigoysa-enimerosi-gia-to-node-js-diorthothikan-16-kena-asfaleias/

#Nodejs #TLS #HTTP2 #SecurityUpdate

RE: https://social.tchncs.de/@sadmin/117600078930364284

Soderle, erst mal HTTP2 disabled. Bei Apache2 unter Linux (Debian/Ubuntu) mit

# a2dismod http2

und dann

# service apache2 restart

#CVE #RCE #Apache #http2 #http2shell #serveradmin

Node.js fixes 17 bugs, including Node.js HTTP/2 vulnerabilities and a TLS heap leak (CVE-2026-123864). Update to 26.13.1, 24.22.3 or 22.23.5.

#NodeJS #HTTP2 #TLS #CVE2026123864 #DoS #JavaScript #CyberSecurity #InfoSec

https://securityonline.info/nodejs-http2-tls-vulnerabilities-november-2026/?utm_source=mastodon&utm_medium=jetpack_social