Denial-of-service

3 posts tagged with “Denial-of-service”

CVE-2026-87776: Express compression leaks native memory until the process dies
cvecompressionexpress

CVE-2026-87776: Express compression leaks native memory until the process dies

How to fix CVE-2026-87776: upgrade compression to 1.8.2

Sep 11, 2026
Read
CVE-2026-85024: undici WebSocket deflate bug can crash the Node process
cveundicinodejs

CVE-2026-85024: undici WebSocket deflate bug can crash the Node process

How to fix CVE-2026-85024: upgrade undici to 8.10.2 (or 7.29.1 / 6.28.1 on older trains)

Sep 4, 2026
Read
BREAKING: CVE-2026-18549 - @fastify/multipart Aborted Upload DoS
cvesecurityvulnerability

BREAKING: CVE-2026-18549 - @fastify/multipart Aborted Upload DoS

CVE-2026-18549 lets unauthenticated clients leak temp files and hang request handlers in @fastify/multipart <10.1.1, causing disk and event-loop exhaustion. Upgrade to 10.1.1.

Aug 16, 2026
Read