A vulnerability, which was classified as problematic, was found in Node.js up to 20.20.1/22.22.1/24.14.0/25.8.1. Affected by this issue is some unknown functionality of the component HTTP2 Server. Such manipulation leads to resource consumption.

This vulnerability is documented as CVE-2026-21714. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.