CVE-2026-54156
1 advisory.
npm/node-opcua CVE-2026-54156: high 7.5, EPSS 0.78%
node-opcua: Unbounded nonce cache enables unauthenticated heap exhaustion DoS
Action: Upgrade node-opcua to 2.166.0 or later.
npm i node-opcua@2.166.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.166.0 | - |
Fixed versions
| 2.166.0 |
Sources
- osv: GHSA-6wvw-vrw4-363w
- https://github.com/node-opcua/node-opcua/security/advisories/GHSA-6wvw-vrw4-363w
- https://github.com/node-opcua/node-opcua/commit/b82c2939fe9c658de58da993f2798ec5481d7313
- https://github.com/node-opcua/node-opcua
- https://github.com/node-opcua/node-opcua/releases/tag/v2.166.0
CVE-2026-54156 · published · modified · JSON