https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T22:36:44.934966+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-22883 CVE-2021-22883 2026-09-29T22:36:44.937271+00:00

Affected: NodeJS Node

Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the process also from opening, e.g. a file. If no file descriptor limit is configured, then this lead to an excessive memory usage and cause the system to run out of memory.

 https://vulnerability.circl.lu/vuln/usn-6418-1 USN-6418-1 — nodejs vulnerabilities 2026-09-29T22:36:44.937372+00:00

Affected: Ubuntu:Pro:18.04:LTS: nodejs, Ubuntu:20.04:LTS: nodejs

It was discovered that Node.js incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue was only fixed in Ubuntu 20.04 LTS. (CVE-2021-22883)

Vít Šesták discovered that Node.js incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code. (CVE-2021-22884)