CVE-2026-48931 Shouldn't Have Been a CVE July 2, 2026 CVE-2026-48931 Shouldn't Have Been a CVE HTTP Response Queue Poisoning in Node.js, the node-fetch Breakage, and Why It Shouldn't Have Been a CVE. I reported and fixed the HTTP/1.1 response queue poisoning issue in Node.js http.Agent that became CVE-2026-48931, and the Node.js team re... はてなテクノロジー 2026年07月03日 06:17