Race Conditions

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packets with a few HTTP/2 frames inside. It is possible to leave s…CVE-2024-27983NodeJS · CVSS 8.2 · 84% likely

   CWE-362

2. A flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before the client has sent the request. This vulnerability affects all supported release…CVE-2026-48931nodejs · CVSS 3.7 · 0.3% likely

   CWE-367

3. A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent before the client has sent the request. This is an incomplete fix of C…CVE-2026-105481nodejs · CVSS 6.5 · 0.3% likely

   CWE-367

4. A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSync#createTagStore() to continue executing a cached prepared statement after it has bee…CVE-2026-58041nodejs · CVSS 5.3 · 0.3% likely

   CWE-367

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.