CVE-2026-87776
CVE Details
Visit the official vulnerability details page for CVE-2026-87776 to learn more.
Initial Publication
09/11/2026
Last Update
09/16/2026
Third Party Dependency
compression
NIST CVE Summary
compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection while a compressed response is still being sent, the zlib stream created to compress that response is never destroyed, so each aborted compressed response leaks its native zlib memory. A remote unauthenticated attacker can repeatedly open requests and disconnect early, exhausting the available memory and crashing the server. All applications using compression are affected. The issue is fixed in compression 1.8.2, and users should upgrade to 1.8.2 or later.
CVE Severity
Our Official Summary
Investigation is ongoing to determine how this vulnerability affects our products.
Status
Awaiting Analysis
Affected Products & Versions
| Version | PaletteAI | PaletteAI VerteX |
|---|---|---|
| 1.4.1 | ⚠️ Impacted | ⚠️ Impacted |
Revision History
No revisions available.