HIGHCVSS 7.5KNOWN EXPLOITED

CVE-2023-44487

CVE-2023-44487 updated by NVD

Published: 2023-10-10
Modified: 2026-09-21
Sources: cisa-kev, nvd

Summary

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

Affected packages

Ecosystem	Package	Affected versions	Fixed versions
Node.js	node.js	[object Object], [object Object]	—

References

https://nvd.nist.gov/vuln/detail/CVE-2023-44487

Includes data from the CISA Known Exploited Vulnerabilities catalog.

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.