VDB
GCVE-110-MAGEIA-2026-9
GCVE-110-MAGEIA-2026-9
Advisory Published
Node.js HTTP/2 server crashes with unhandled error when receiving
malformed HEADERS frame. (CVE-2025-59465)
Uncatchable "Maximum call stack size exceeded" error on Node.js via
async_hooks leads to process crashes bypassing error handlers.
(CVE-2025-59466)
Bypass File System Permissions using crafted symlinks. (CVE-2025-55130)
Timeout-based race conditions make Uint8Array/Buffer.alloc
non-zerofilled. (CVE-2025-55131)
fs.futimes() Bypasses Read-Only Permission Model. (CVE-2025-55132)
TLS PSK/ALPN Callback Exceptions Bypass Error Handlers, Causing DoS and
FD Leak. (CVE-2026-21637)
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | nodejs | 0 (affected), 22.22.0-1.mga9 (unaffected) | — |
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.