Skip to content
OpenAdvisories

Package · Debian

node-compression

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-87776

    compression vulnerable to Denial of Service via memory leak on premature response close

    compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection while a compressed response is still being sent, the zlib stream created to compress that response is never destroyed, so each aborted c…

    compression compression node-compression compression Debian Ubuntu npm