delvedor CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH delvedor CVE published 2026-07-28

CVE-2026-47219

CVE-2026-47219 is a remotely triggerable DoS vulnerability in the find-my-way framework when used with Node's HTTP/2 server. The issue arises from the lookup() function passing req.method into find(), which can resolve inherited object properties due to the use of a normal object for this.trees[method]. This causes the code to treat the resolved value like a router node and crash when it reaches currentNo [truncated]