undici-types vulnerabilities (TuxCare)
25 vulnerabilities.
undici-typesTuxCareundici vulnerable to downstream response splitting via retry interceptor3.7 Lowundici-typesTuxCareundici vulnerable to Denial of Service via unrequested WebSocket subprotocol7.5 Highundici-typesTuxCareundici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool7.4 Highundici-typesTuxCareundici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression5.9 Mediumundici-typesTuxCareundici vulnerable to Denial of Service via WebSocketStream unclean close5.9 Mediumundici-typesTuxCareundici vulnerable to caching and replay of unsafe HTTP method responses3.7 Lowundici-typesTuxCareundici vulnerable to response truncation via oversized chunked responses in the dump interceptor3.7 Lowundici-typesTuxCareundici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches6.5 Mediumundici-typesTuxCareundici vulnerable to Denial of Service via unbounded decompression of compressed responses5.9 Mediumundici-typesTuxCareundici vulnerable to Denial of Service via orphaned RetryHandler response body5.9 Mediumundici-typesTuxCareundici vulnerable to CRLF Injection via blob-like body 'type' property4.2 Mediumundici-typesTuxCareundici vulnerable to downstream response desynchronization via retry interceptor4.8 Mediumundici-typesTuxCareundici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields4.8 Mediumundici-typesTuxCareundici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching3.7 Lowundici-typesTuxCareundici vulnerable to HTTP response queue poisoning via keep-alive socket reuse3.7 Lowundici-typesTuxCareundici vulnerable to HTTP header injection via Set-Cookie percent-decoding5.9 Mediumundici-typesTuxCareundici WebSocket client vulnerable to denial of service via fragment count bypass7.5 Highundici-typesTuxCareundici is vulnerable to Unhandled Exception in undici WebSocket Client Due to Invalid server_max_window_bits Validation7.5 Highundici-typesTuxCareundici is vulnerable to Malicious WebSocket 64-bit length overflows undici parser and crashes the client7.5 Highundici-typesTuxCareundici is vulnerable to CRLF Injection via upgrade option4.6 Mediumundici-typesTuxCareundici is vulnerable to Unbounded Memory Consumption in undici WebSocket permessage-deflate Decompression7.5 Highundici-typesTuxCareundici is vulnerable to Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')6.5 Mediumundici-typesTuxCareUndici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion5.9 Mediumundici-typesTuxCareundici Denial of Service attack via bad certificate data3.1 Lowundici-typesTuxCareUndici Uses Insufficiently Random Values6.8 Medium