tls denial of service

  1. CVE-2026-21637 Node.js TLS Callback DoS: pskCallback and ALPNCallback Fixes

    When Microsoft quietly flags a CVE through its Security Update Guide, the shorthand can hide a lot of practical risk. In the case of CVE-2026-21637, the key issue is not a flashy remote code execution claim but something more mundane and, in many production environments, just as disruptive: a...