undici
An HTTP/1.1 client, written from scratch for Node.js
Security Advisories for undici in npm
High
8 days ago
undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects
npm
undici
High
8 days ago
undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent
npm
undici
High
8 days ago
undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation
npm
undici
Moderate
8 days ago
undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering
npm
undici
Moderate
8 days ago
undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor
npm
undici
High
8 days ago
undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake
npm
undici
High
12 days ago
undici vulnerable to Denial of Service via unhandled error on excessive content-encodings
npm
undici
Moderate
12 days ago
undici vulnerable to Denial of Service via unbounded memory in the EventSource parser
npm
undici
Moderate
12 days ago
undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens
npm
undici
Moderate
about 1 month ago
undici vulnerable to Denial of Service via orphaned RetryHandler response body
npm
undici
Low
about 1 month ago
undici vulnerable to downstream response splitting via retry interceptor
npm
undici
High
about 1 month ago
undici vulnerable to Denial of Service via unrequested WebSocket subprotocol
npm
undici
Moderate
about 1 month ago
undici vulnerable to Denial of Service via unbounded decompression of compressed responses
npm
undici
Moderate
about 1 month ago
undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches
npm
undici
Low
about 1 month ago
undici vulnerable to response truncation via oversized chunked responses in the dump interceptor
npm
undici
High
about 1 month ago
undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool
npm
undici
Low
about 1 month ago
undici vulnerable to caching and replay of unsafe HTTP method responses
npm
undici
High
about 1 month ago
undici vulnerable to cross-origin cache poisoning via missing origin isolation in interceptors
npm
undici
Moderate
about 1 month ago
undici vulnerable to Denial of Service via WebSocketStream unclean close
npm
undici
Moderate
about 1 month ago
undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression
npm
undici
Moderate
3 months ago
undici vulnerable to CRLF Injection via blob-like body 'type' property
npm
undici
Moderate
3 months ago
undici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directives
npm
undici
Moderate
3 months ago
undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields
npm
undici
Moderate
3 months ago
undici vulnerable to downstream response desynchronization via retry interceptor
npm
undici
High
3 months ago
undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives
npm
undici
Low
5 months ago
undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching
npm
undici
High
5 months ago
undici WebSocket client vulnerable to denial of service via fragment count bypass
npm
undici
Moderate
5 months ago
undici vulnerable to HTTP header injection via Set-Cookie percent-decoding
npm
undici
High
5 months ago
undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse
npm
undici
Low
5 months ago
undici vulnerable to HTTP response queue poisoning via keep-alive socket reuse
npm
undici
High
5 months ago
undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent
npm
undici
Moderate
5 months ago
undici vulnerable to cross-user information disclosure via shared cache whitespace bypass
npm
undici
High
5 months ago
undici WebSocket client vulnerable to denial of service via cumulative fragment bypass
npm
undici
High
8 months ago
Undici has Unbounded Memory Consumption in WebSocket permessage-deflate Decompression
npm
undici
High
8 months ago
Undici has Unhandled Exception in WebSocket Client Due to Invalid server_max_window_bits Validation
npm
undici
Moderate
8 months ago
Undici has Unbounded Memory Consumption in its DeduplicationHandler via Response Buffering that leads to DoS
npm
undici
High
8 months ago
Undici: Malicious WebSocket 64-bit length overflows parser and crashes the client
npm
undici
Moderate
10 months ago
Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion
npm
undici
Low
over 2 years ago
Undici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect
npm
undici
Low
over 2 years ago
Undici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline
npm
undici
Low
over 2 years ago
Undici proxy-authorization header not cleared on cross-origin redirect in fetch
npm
undici
Low
about 3 years ago
Undici's cookie header not cleared on cross-origin redirect in fetch
npm
undici
Moderate
about 4 years ago
`undici.request` vulnerable to SSRF using absolute URL on `pathname`
npm
undici
Low
over 4 years ago
undici before v5.8.0 vulnerable to uncleared cookies on cross-host / cross-origin redirect
npm
undici
Moderate
over 4 years ago
undici before v5.8.0 vulnerable to CRLF injection in request headers
npm
undici