You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Commit be2898b
Browse filesBrowse the repository at this point in the historyBrowse files
Http2Session::AltSvc allocated origin and field-value buffers at their
exact lengths but requested V8 to append a null terminator. This wrote
one byte past heap-backed buffers.
nghttp2_submit_altsvc() consumes explicit lengths and makes its own
terminated copies. Write only the string contents.
Assisted-by: OpenAI Codex
Signed-off-by: Matteo Collina <[email protected]>
PR-URL: nodejs-private/node-private#1035
Reviewed-By: Tim Perry <[email protected]>
CVE-ID: CVE-2026-123828
0 commit comments