undici vulnerabilities

undici vulnerable to cross-user information disclosure via cross-origin redirect revalidation

undici · undici

undici vulnerable to cross-origin credential disclosure via array-of-tuples headers bypassing redirect stripping

undici · undici

undici vulnerable to Subresource Integrity bypass via whitespace in integrity metadata

undici · undici

undici vulnerable to cache poisoning and cross-user disclosure via intermediate redirect hops

undici · undici

undici vulnerable to Denial of Service via unhandled exception in cache-interceptor response replay

undici · undici

undici vulnerable to cross-user cache disclosure via same-origin redirect

undici · undici

undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor

undici · undici

undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering

undici · undici

undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation

undici · undici

undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent

undici · undici