Chris Rohlf in collaboration with Claude and Anthropic Research

Node.js is vulnerable to an HTTP/2 denial of service via a NULL pointer dereference when a respondWithFile() download is cancelled

Node.js is vulnerable to an HTTP/2 use-after-free via respondWithFile() stream reset during a pending write

Node.js is vulnerable to cross-connection memory disclosure via TLS write re-entrancy in the HTTPS request parser

Node.js is vulnerable to a remote HTTP/2 denial of service via a reachable assertion in Http2Session teardown

Node.js is vulnerable to a zlib denial of service via a stream destroy during a pending params() call