Skip to contentUndici vulnerabilities
Newest
- nodejs undici, fedoraproject fedora +1 moreUndici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipelineCVE-2024-30260Fix available3.9 Low
- nodejs undiciBackpressure request ignored in fetch() in UndiciCVE-2024-24750Fix available6.5 Medium
- nodejs undiciProxy-Authorization header not cleared on cross-origin redirect in fetch in UndiciCVE-2024-24758Fix available3.9 Low
- nodejs undici, fedoraproject fedora +1 moreUndici's cookie header not cleared on cross-origin redirect in fetchCVE-2023-45143Fix available3.9 Low
- nodejs node.js, undici +1 moreCRLF Injection in Nodejs ‘undici’ via hostCVE-2023-23936Fix available6.5 Medium
- nodejs undiciUndici vulnerable to Regular Expression Denial of Service in HeadersCVE-2023-24807Fix available7.5 High
- nodejs undiciCRLF Injection in Nodejs ‘undici’ via Content-TypeCVE-2022-35948Fix available5.3 Medium
- nodejs undici`undici.request` vulnerable to SSRF using absolute URL on `pathname`CVE-2022-35949Fix available5.3 Medium
- nodejs undiciUncleared cookies on cross-host/cross-origin redirect in undiciCVE-2022-31151Fix available3.7 Low
- nodejs undiciCRLF injection in request headersCVE-2022-31150Fix available5.3 Medium