· javascript
Node.js fixes 16 flaws, including HTTP/2 bugs crashing servers and leaking data
Servers utilizing Node.js's native HTTP/2 capability on the 24.x and 26.x branches can suffer crashes triggered by unauthenticated users, thanks to a vulnerability patched this week.
Furthermore, a separate issue within HTTP/2 allows a server to inadvertently transmit segments of its memory to a client, potentially exposing data meant for different connections. Updated releases have been made to address these security concerns across all three currently supported lines: 22.23.5, 24.22.3, and 26.13.1.
