CVE-2026-1528 — ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length. undici's ByteParser overflows internal math, ends up in an invalid state, and throws a f — CVE Database · The Intelligence Room