The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions. This vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-nodemonUpgrade npmUpgrade nodejsUpgrade nodejs-libsUpgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade nodejs-docsUpgrade v8-12.4-develUpgrade nodejs-packaging-bundlerUpgrade nodejs-devel | Feb 20, 2025 | Feb 7, 2025 |
| Alpine Linux | — | Upgrade nodejs | Aug 8, 2025 | Feb 7, 2025 |
| Amazon_linux_2023 | — | Upgrade nodejs-develUpgrade nodejs-libsUpgrade nodejs-libs-debuginfoUpgrade nodejsUpgrade nodejs20-full-i18nUpgrade nodejs20-debugsourceUpgrade v8-10.2-develUpgrade nodejs-full-i18nUpgrade nodejs20-docsUpgrade nodejs-npmUpgrade nodejs20-develUpgrade nodejs20-debuginfoUpgrade nodejs20Upgrade nodejs20-npmUpgrade nodejs20-libs-debuginfoUpgrade nodejs-debugsourceUpgrade nodejs-debuginfoUpgrade v8-11.3-develUpgrade nodejs-docsUpgrade nodejs20-libs | Feb 17, 2025 | Jan 21, 2025 |
| Debian | — | Upgrade nodejs | Feb 26, 2025 | Feb 7, 2025 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | Jun 13, 2025 | Feb 7, 2025 |
| Oracle_linux | — | Upgrade v8-12.4-develUpgrade nodejs-packaging-bundlerUpgrade npmUpgrade nodejs-nodemonUpgrade nodejs-develUpgrade nodejsUpgrade nodejs-docsUpgrade nodejs-packagingUpgrade nodejs-libsUpgrade nodejs-full-i18n | Feb 14, 2025 | Jan 21, 2025 |
| Redhat_linux | — | Upgrade nodejs-debugsourceUpgrade nodejs-libs-debuginfoUpgrade nodejs-packagingUpgrade nodejs-docsUpgrade nodejs-libsUpgrade nodejs-full-i18nUpgrade nodejsUpgrade npmUpgrade nodejs-debuginfoUpgrade v8-12.4-develUpgrade nodejs-develUpgrade nodejs-packaging-bundlerUpgrade nodejs-nodemon | Feb 13, 2025 | Feb 7, 2025 |
| Rocky_linux | — | Upgrade nodejs-debuginfoUpgrade nodejs-libs-debuginfoUpgrade nodejsUpgrade nodejs-develUpgrade nodejs-libsUpgrade npmUpgrade nodejs-debugsourceUpgrade v8-12.4-develUpgrade nodejs-full-i18n | Feb 14, 2025 | Feb 7, 2025 |
| Suse | — | Upgrade nodejs22-develUpgrade nodejs18-develUpgrade nodejs20-develUpgrade npm18Upgrade npm20Upgrade nodejs20Upgrade nodejs22Upgrade corepack20Upgrade nodejs20-docsUpgrade nodejs18Upgrade npm22Upgrade nodejs22-docsUpgrade corepack22Upgrade nodejs18-docs | Jan 27, 2025 | Jan 24, 2025 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Feb 7, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Feb 7, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub