The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A memory leak occurs in Node.js HTTP/2 servers when a client sends WINDOW_UPDATE frames on stream 0     (connection-level) that cause the flow control window to exceed the maximum value of 2-1. The server     correctly sends a GOAWAY frame, but the Http2Session object is never cleaned up. This vulnerability     affects HTTP2 users on Node.js 20, 22, 24 and 25. (CVE-2026-21714)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-21714

medium Nessus Plugin ID 303613

Version 1.4