undici
An HTTP/1.1 client, written from scratch for Node.js
Security Advisories for undici in npm
High
3 days ago
undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects
npm
undici
High
3 days ago
undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent
npm
undici
High
3 days ago
undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation
npm
undici
Moderate
3 days ago
undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering
npm
undici
Moderate
3 days ago
undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor
npm
undici
High
3 days ago
undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake
npm
undici
High
6 days ago
undici vulnerable to Denial of Service via unhandled error on excessive content-encodings
npm
undici
Moderate
6 days ago
undici vulnerable to Denial of Service via unbounded memory in the EventSource parser
npm
undici
Moderate
6 days ago
undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens
npm
undici
Moderate
about 1 month ago
undici vulnerable to Denial of Service via orphaned RetryHandler response body
npm
undici
Low
about 1 month ago
undici vulnerable to downstream response splitting via retry interceptor
npm
undici
High
about 1 month ago
undici vulnerable to Denial of Service via unrequested WebSocket subprotocol
npm
undici
Moderate
about 1 month ago
undici vulnerable to Denial of Service via unbounded decompression of compressed responses
npm
undici
Moderate
about 1 month ago
undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches
npm
undici
Low
about 1 month ago
undici vulnerable to response truncation via oversized chunked responses in the dump interceptor
npm
undici
High
about 1 month ago
undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool
npm
undici
Low
about 1 month ago
undici vulnerable to caching and replay of unsafe HTTP method responses
npm
undici
High
about 1 month ago
undici vulnerable to cross-origin cache poisoning via missing origin isolation in interceptors
npm
undici
Moderate
about 1 month ago
undici vulnerable to Denial of Service via WebSocketStream unclean close
npm
undici
Moderate
about 1 month ago
undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression
npm
undici
Moderate
3 months ago
undici vulnerable to CRLF Injection via blob-like body 'type' property
npm
undici
Moderate
3 months ago
undici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directives
npm
undici
Moderate
3 months ago
undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields
npm
undici
Moderate
3 months ago
undici vulnerable to downstream response desynchronization via retry interceptor
npm
undici
High
3 months ago
undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives
npm
undici
Low
4 months ago
undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching
npm
undici
High
4 months ago
undici WebSocket client vulnerable to denial of service via fragment count bypass
npm
undici
Moderate
4 months ago
undici vulnerable to HTTP header injection via Set-Cookie percent-decoding
npm
undici
High
4 months ago
undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse
npm
undici
Low
4 months ago
undici vulnerable to HTTP response queue poisoning via keep-alive socket reuse
npm
undici
High
4 months ago
undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent
npm
undici
Moderate
4 months ago
undici vulnerable to cross-user information disclosure via shared cache whitespace bypass
npm
undici
High
4 months ago
undici WebSocket client vulnerable to denial of service via cumulative fragment bypass
npm
undici
High
8 months ago
Undici has Unbounded Memory Consumption in WebSocket permessage-deflate Decompression
npm
undici
High
8 months ago
Undici has Unhandled Exception in WebSocket Client Due to Invalid server_max_window_bits Validation
npm
undici
Moderate
8 months ago
Undici has Unbounded Memory Consumption in its DeduplicationHandler via Response Buffering that leads to DoS
npm
undici
High
8 months ago
Undici: Malicious WebSocket 64-bit length overflows parser and crashes the client
npm
undici
Moderate
10 months ago
Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion
npm
undici
Low
over 2 years ago
Undici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect
npm
undici
Low
over 2 years ago
Undici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline
npm
undici
Low
over 2 years ago
Undici proxy-authorization header not cleared on cross-origin redirect in fetch
npm
undici
Low
about 3 years ago
Undici's cookie header not cleared on cross-origin redirect in fetch
npm
undici
Moderate
about 4 years ago
`undici.request` vulnerable to SSRF using absolute URL on `pathname`
npm
undici
Low
over 4 years ago
undici before v5.8.0 vulnerable to uncleared cookies on cross-host / cross-origin redirect
npm
undici
Moderate
over 4 years ago
undici before v5.8.0 vulnerable to CRLF injection in request headers
npm
undici