# Mitigating Denial-of-Service Vulnerability from Unrecoverable Stack Space Exhaustion for React, Next.js, and APM Users

DevFeed: [Mitigating Denial-of-Service Vulnerability from Unrecoverable Stack Space Exhaustion for React, Next.js, and APM Users](<https://devfeed.tech/articles/mitigating-denial-of-service-vulnerability-from-unrecoverable-stack-space-exhaustion-for-react-next-js-and-apm-users-2883.md>)

Original publisher: [Read original article](<https://nodejs.org/en/blog/vulnerability/january-2026-dos-mitigation-async-hooks>)

Published: 2026-01-13T17:00:00Z

Content type: article

Language: en

Sources: [Node.js Blog](<https://devfeed.tech/sources/node-js-blog.md>)

Topics: [Node.js](<https://devfeed.tech/topics/node-js.md>), [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [DDoS](<https://devfeed.tech/topics/ddos.md>), [Next.js](<https://devfeed.tech/topics/next-js.md>), [React](<https://devfeed.tech/topics/react.md>), [Application Performance Management (APM)](<https://devfeed.tech/topics/apm.md>), [Availability](<https://devfeed.tech/topics/availability.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>)

Tags: [apm](<https://devfeed.tech/tags/apm.md>), [availability](<https://devfeed.tech/tags/availability.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [next-js](<https://devfeed.tech/tags/next-js.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [react](<https://devfeed.tech/tags/react.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

## AI overview

Node.js describes a denial-of-service vulnerability in which stack space exhaustion can cause an immediate, uncatchable process exit when async hooks are enabled. The issue affects applications using React Server Components, Next.js request-context tracking, and APM instrumentation. A January 2026 Node.js security release adds a mitigation, while applications and frameworks should adopt stronger defenses such as limiting attacker-controlled recursion.

## Source excerpt

Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.