POJIA破甲
地图 / CVE-2026-58045

CVE-2026-58045

A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger a reachable assertion in the synchronous `node:zlib` APIs, causing…

NVD CVSS
—
CWE
—
未来 30 天被利用概率
0.2%
利用等级
低概率(<1%)
发布时间
—

关联的公开报告 1 份

Reachable assertion in node:zlib sync API crashes the entire process via spoofed TypedArray byteLength (all 11 *Sync functions affected)Node.js · 低危 · 2026-08-28