POJIA破甲
地图 / CVE-2026-21710

CVE-2026-21710

A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received with a header named `proto` and the…

NVD CVSS
—
CWE
—
未来 30 天被利用概率
25.4%
利用等级
高概率(≥10%)
发布时间
—

关联的公开报告 1 份

Denial of Service via `__proto__` header name in `req.headersDistinct` (Uncaught `TypeError` crashes Node.js process)Node.js · 中危 · 2026-03-30