node-opcua: Unbounded nonce cache enables unauthenticated heap exhaustion DoS Home on GitLab Advisory Database (GLAD) / 1d Summary A process-global nonce cache with no eviction policy allows an unauthenticated remote attacker to exhaust server heap memory by repeatedly opening sessions, causing the node-opcua server process to crash. CVE-2026-54156: node-opcua: Unbounded nonce cache enables unauthenticated heap exhaustion DoS
advisories.gitlab.com·Aug 22