CVE-2026-123863 | OpenJS Foundation Node.js up to 24.22.2/26.13.0 HTTP/2 Session ~Http2Session assertion

November 11, 2026 Yanac

A vulnerability classified as problematic was found in OpenJS Foundation Node.js up to 24.22.2/26.13.0. This affects the function Http2Session::~Http2Session of the component HTTP2 Session. Such manipulation leads to reachable assertion.

This vulnerability is uniquely identified as CVE-2026-123863. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More