The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw in V8's string hashing mechanism causes integer-like strings to be hashed to their numeric value,     making hash collisions trivially predictable. By crafting a request that causes many such collisions in     V8's internal string table, an attacker can significantly degrade performance of the Node.js process. The     most common trigger is any endpoint that calls `JSON.parse()` on attacker-controlled input, as JSON     parsing automatically internalizes short strings into the affected hash table. This vulnerability affects
    **20.x, 22.x, 24.x, and 25.x**. (CVE-2026-21717)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-21717

medium Nessus Plugin ID 303760

Version 1.6