SecurityNode.js Blog6 months ago
Node.js DoS Risk from Stack Exhaustion in React, Next.js
1 min read
A denial-of-service vulnerability affects React, Next.js, and APM users when async_hooks are enabled. Recursion in user code exhausts stack space, causing Node.js to exit with code 7 instead of throwing a recoverable error. Node.js shipped a mitigation in the January 2026 security release.
Level
Hype check
Tap to vote and see what everyone thinks.