الرئيسية
الرئيسية
الاتجاهات
الاتجاهات
الثغرات
الثغرات
الأخبار
الأخبار
الباحثون
الباحثون
لماذا dbugs؟
لماذا dbugs؟
الإعدادات

Kkamji98

#39654من 60,387
7.5إجمالي CVSS
الثغرات · 1
PT-2026-89865
2026-09-11
7.5
CVE-2026-87776
Npm
Compression
This Node.js and Express compression middleware contains a memory leak. When a client aborts a connection while a compressed response is being transmitted, the zlib stream used for compression is not destroyed. A remote unauthenticated attacker can exploit this by repeatedly initiating requests and disconnecting prematurely, leading to the exhaustion of native zlib memory and causing the server to crash. This results in a Denial of Service (DoS), a condition where a service is unavailable to its intended users.