{"type":"bundle","id":"bundle--40381f86-58b9-544d-bdc4-c72eff8020b4","objects":[{"type":"campaign","spec_version":"2.1","id":"campaign--e13deeec-ed90-564c-9768-7d43b5aa28dd","created":"2026-09-20T19:22:09.637Z","modified":"2026-09-20T19:22:09.637Z","name":"Express compression leaks native memory until the process dies","description":"Express compression zlib abort handling can leak native memory until the process dies. Upgrade to the patched release.","aliases":["CVE-2026-87776"],"first_seen":"2026-09-11T00:00:00.000Z","last_seen":"2026-09-11T12:00:00.000Z","objective":"Defensive public threat-intelligence record; see limitations and source references.","external_references":[{"source_name":"NVD CVE-2026-87776","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87776"},{"source_name":"HOL Guard operator write-up","url":"https://hol.org/blog/cve-2026-87776-express-compression-zlib-abort-memory-dos"},{"source_name":"CVE Record CVE-2026-87776","url":"https://www.cve.org/CVERecord?id=CVE-2026-87776"}]}]}