node/lib
Matteo Collina bc0b53813e
http: fix response queue poisoning in http.Agent
Attach a data guard listener on idle keepAlive sockets in the
freeSockets pool. If unsolicited data arrives while the socket
is idle, destroy it immediately to prevent response queue poisoning.

Refs: https://hackerone.com/reports/3582376
PR-URL: https://github.com/nodejs-private/node-private/pull/846
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
CVE-ID: CVE-2026-48931
2026-06-17 18:52:20 +02:00
..
assert
dns
fs
inspector
internal permission: disable FileHandle utimes with permission model 2026-06-17 18:52:17 +02:00
path
readline
stream stream: add stream/iter to classic stream adapters 2026-05-05 16:19:19 +02:00
test
timers
util
zlib
_http_agent.js http: fix response queue poisoning in http.Agent 2026-06-17 18:52:20 +02:00
_http_client.js http: add httpValidation option to configure header value validation 2026-05-30 19:26:27 +02:00
_http_common.js http: add httpValidation option to configure header value validation 2026-05-30 19:26:27 +02:00
_http_incoming.js http: add req.signal to IncomingMessage 2026-05-05 16:19:17 +02:00
_http_outgoing.js http: add httpValidation option to configure header value validation 2026-05-30 19:26:27 +02:00
_http_server.js http: add httpValidation option to configure header value validation 2026-05-30 19:26:27 +02:00
_tls_common.js
_tls_wrap.js
assert.js
async_hooks.js
buffer.js buffer: increase Buffer.poolSize default to 64 KiB 2026-05-30 19:26:26 +02:00
child_process.js lib: handle --permission-audit when propagating flags 2026-05-19 14:08:16 +02:00
cluster.js
console.js
constants.js
crypto.js crypto: implement randomUUIDv7() 2026-05-05 16:19:18 +02:00
dgram.js
diagnostics_channel.js diagnostics_channel: add BoundedChannel and scopes 2026-05-05 16:19:06 +02:00
dns.js dns,net: reject hostnames with embedded NUL bytes 2026-06-17 18:51:45 +02:00
domain.js
eslint.config_partial.mjs quic: add proper error codes & messages for QUIC failures 2026-05-30 19:26:26 +02:00
events.js
ffi.js ffi: move DynamicLibrary disposer to native layer 2026-05-23 00:05:43 +02:00
fs.js fs: validate position argument before length === 0 early return 2026-05-05 16:19:28 +02:00
http.js
http2.js
https.js
inspector.js
module.js
net.js dns,net: reject hostnames with embedded NUL bytes 2026-06-17 18:51:45 +02:00
os.js
path.js
perf_hooks.js
process.js
punycode.js
querystring.js
quic.js quic: complete the internal implementation of QUIC 2026-05-19 14:08:13 +02:00
readline.js
repl.js
sea.js
sqlite.js
stream.js
string_decoder.js
sys.js
test.js test_runner: add getTestContext() 2026-05-05 16:19:15 +02:00
timers.js
tls.js tls: normalize hostname for server identity checks 2026-06-17 18:50:53 +02:00
trace_events.js
tty.js
url.js
util.js util: create hex style cache and fast path 2026-05-30 19:26:27 +02:00
v8.js v8: add cpu profile options 2026-05-05 16:19:39 +02:00
vm.js
wasi.js
worker_threads.js
zlib.js