CVE-2026-65833
2026-11-11
19h17 +00:00
19h17 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
iopress is a native HTTP server for Node.js with platform-specific async I/O. Prior to version 1.0.5, the chunked-transfer-encoding HTTP request parser in @iopress/core reads past the end of the input buffer when a request declares a chunk size larger than the body actually received. This results in a heap-buffer-over-read. This issue has been patched in version 1.0.5.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Buffer Over-read The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer. |
