Node.js HTTP/2 flaws crash servers and leak connection data

Node.js 24.x and 26.x releases contain two HTTP/2 vulnerabilities: one allowing unauthenticated clients to crash servers, and another enabling servers to leak memory including responses from other connections. Fixed versions 22.23.5, 24.22.3, and 26.13.1 are available. Administrators should update immediately to prevent availability loss and data exposure.