CVE-2026-123874 | OpenJS Foundation Node.js up to 24.22.2/26.13.0 HTTP 2 stream.respondWithFile/stream.respondWithFD use after free

A vulnerability classified as problematic has been found in OpenJS Foundation Node.js up to 24.22.2/26.13.0. This issue affects the function stream.respondWithFile/stream.respondWithFD of the component HTTP 2. Performing a manipulation results in use after free.

This vulnerability is known as CVE-2026-123874. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More