CVE-2026-105481

CVE-2026-105481 published: A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent before the client has sent the request. This is an incomplete fix of CVE-2026-48931. The guard that destroys idle keep-alive sockets when unexpecte...

View full NVD advisory → ← Back to CVE watch