CVE-2015-8027

CVE-2015-8027 is a denial-of-service vulnerability affecting Node.js versions 0.12.x before 0.12.9, 4.x before 4.2.3, and 5.x before 5.1.1. This flaw allows remote attackers to trigger an uncaughtException and service outage by sending a pipelined HTTP request, exploiting the lack of a dedicated parser for each HTTP socket. Rated 7.5 HIGH on CVSS, this vulnerability is easily exploitable over the network with low attack complexity, leading to a complete loss of availability. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered significant community discussion and media coverage, indicating awareness of its potential impact.