CVE-2026-21710 | Node.js up to 20.20.1/22.22.1/24.14.0/25.8.1 req.headersDistinct denial of service

March 30, 2026 Yanac

A vulnerability described as problematic has been identified in Node.js up to 20.20.1/22.22.1/24.14.0/25.8.1. This affects an unknown function. Executing a manipulation of the argument req.headersDistinct can lead to denial of service.

This vulnerability is tracked as CVE-2026-21710. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More