Mittel 5.9Linux-Server
CVE-2026-125332
node-forge: node-forge: Denial of Service via unsupported TLS ServerHello compression method
node-forge
### Summary A `forge.tls` client accepts any compression method in the ServerHello, although it only offers no compression. An unknown method makes `connection.process()` throw an uncaught `Error` when the client handles ServerHelloDone, before the server is authenticated. A malicious server or an on-path attacker can use this to terminate a Node.js process. Fixed in node-forge 1.4.3. ### Details The client's ClientHello offers only the `null` compression method…
10. Nov 2026
Original bei Red Hat öffnen