CVE-2026-21710 – Node.js HTTP Module Denial of Service

Node.js addressed CVE-2026-21710, a high-severity vulnerability in its HTTP handling that can lead to denial of service. The issue allows attackers to send specially crafted requests that exhaust server resources or disrupt normal processing, causing applications to become unresponsive. This directly impacts availability for services built on Node.js.

CVE-2026-21710 has a CVSS score of 7.5, which is High severity. There is no verified evidence of active exploitation or publicly available proof-of-concept code. The patch improves how the HTTP module processes incoming requests, preventing resource exhaustion and stabilizing server performance under malicious input.