A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions. This vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-docsUpgrade nodejs-packaging-bundlerUpgrade nodejs-develUpgrade v8-12.4-develUpgrade nodejs-nodemonUpgrade nodejs-packagingUpgrade npmUpgrade nodejs-libsUpgrade nodejsUpgrade nodejs-full-i18n | Feb 20, 2025 | Feb 7, 2025 |
| Alpine Linux | — | Upgrade nodejs | Aug 8, 2025 | Feb 7, 2025 |
| Amazon_linux_2023 | — | Upgrade nodejs20Upgrade nodejs-docsUpgrade nodejs20-libs-debuginfoUpgrade nodejs-npmUpgrade nodejs20-npmUpgrade nodejs20-debuginfoUpgrade nodejs-debugsourceUpgrade nodejs-debuginfoUpgrade v8-11.3-develUpgrade nodejs20-develUpgrade nodejs20-libsUpgrade nodejs-libsUpgrade nodejs-full-i18nUpgrade nodejs-libs-debuginfoUpgrade nodejs20-docsUpgrade v8-10.2-develUpgrade nodejs-develUpgrade nodejsUpgrade nodejs20-debugsourceUpgrade nodejs20-full-i18n | Feb 17, 2025 | Jan 21, 2025 |
| Debian | — | Upgrade nodejs | Feb 26, 2025 | Feb 7, 2025 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | Jun 13, 2025 | Feb 7, 2025 |
| Oracle_linux | — | Upgrade nodejs-libsUpgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade nodejs-docsUpgrade nodejsUpgrade nodejs-packaging-bundlerUpgrade nodejs-nodemonUpgrade npmUpgrade nodejs-develUpgrade v8-12.4-devel | Feb 14, 2025 | Jan 21, 2025 |
| Redhat_linux | — | Upgrade v8-12.4-develUpgrade nodejs-develUpgrade nodejs-debuginfoUpgrade nodejs-nodemonUpgrade npmUpgrade nodejs-packaging-bundlerUpgrade nodejs-docsUpgrade nodejs-full-i18nUpgrade nodejs-libs-debuginfoUpgrade nodejs-debugsourceUpgrade nodejs-libsUpgrade nodejs-packagingUpgrade nodejs | Feb 13, 2025 | Feb 7, 2025 |
| Rocky_linux | — | Upgrade nodejs-full-i18nUpgrade v8-12.4-develUpgrade nodejs-libsUpgrade nodejs-debugsourceUpgrade npmUpgrade nodejs-develUpgrade nodejs-debuginfoUpgrade nodejs-libs-debuginfoUpgrade nodejs | Feb 14, 2025 | Feb 7, 2025 |
| Suse | — | Upgrade nodejs20Upgrade nodejs22-develUpgrade nodejs18-develUpgrade npm18Upgrade nodejs20-develUpgrade npm20Upgrade nodejs18-docsUpgrade npm22Upgrade corepack20Upgrade corepack22Upgrade nodejs18Upgrade nodejs20-docsUpgrade nodejs22Upgrade nodejs22-docs | Jan 27, 2025 | Jan 24, 2025 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Feb 7, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Feb 7, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub