Security: nodejs/undici
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
CRLF Injection in Nodejs ‘undici’ via Content-TypeGHSA-f772-66g8-q5h3 published
Aug 9, 2022 by mcollinaModerate -
`undici.request` vulnerable to SSRF using absolute URL on `pathname`GHSA-8qr4-xgw6-wmr3 published
Aug 9, 2022 by mcollinaModerate -
CRLF injection in request path, method, and headersGHSA-3cvr-822r-rqcc published
Jul 18, 2022 by mcollinaModerate -
Cookies uncleared on cross-host / cross-origin redirectGHSA-q768-x9m6-m9qp published
Jul 18, 2022 by mcollinaLow -
ProxyAgent vulnerable to MITMGHSA-pgw7-wx7w-2w33 published
Jun 13, 2022 by mcollinaHigh