CVE-2026-48069: Node Zlib Stream Missing Error Handler

A zlib stream was initialized and listened to without attaching an 'error' event handler. In Node.js, unhandled 'error' events on streams throw uncaught exceptions, leading to process crashes when processing invalid or malformed compressed input.

Provally CuratedPublic repositoryMediumHigh confidenceVerifiedApache-2.0JS
greprules fetch cve-2026-48069-node-zlib-stream-missing-error-handler --engine opengrep

Description

A zlib stream was initialized and listened to without attaching an 'error' event handler. In Node.js, unhandled 'error' events on streams throw uncaught exceptions, leading to process crashes when processing invalid or malformed compressed input.