Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Kjsik11

#41856of 60,401
7.5Total CVSS
Vulnerabilities · 1
PT-2026-114837
2026-10-15
7.5
CVE-2026-109855
Npm
Undici
The experimental WebSocket client in this Node.js HTTP client library mishandles failed WebSocket handshakes over HTTP/2. Because the request is marked as completed, the abort operation is ignored, leaving the underlying HTTP/2 stream open without an error listener. A remote, unauthenticated server can trigger a denial of service by destroying the connection, causing the orphaned stream to emit an unhandled error that crashes the Node.js process.