Advisories · Technology
undici.
Every CVE that names undici among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.9 Medium
undici vulnerable to cross-user information disclosure via cross-origin redirect revalidation
- undici
- CWE-346
- CWE-524
- CVSS 5.9 Medium
undici vulnerable to cross-origin credential disclosure via array-of-tuples headers bypassing redirect stripping
- undici
- Information disclosure
- CWE-212
- CVSS 5.9 Medium
undici vulnerable to Subresource Integrity bypass via whitespace in integrity metadata
- undici
- CWE-354
- CVSS 7.4 High
undici vulnerable to cache poisoning and cross-user disclosure via intermediate redirect hops
- undici
- CWE-346
- CWE-524
- CVSS 5.9 Medium
undici vulnerable to Denial of Service via unhandled exception in cache-interceptor response replay
- undici
- CWE-248
- CWE-755
- CVSS 6.5 Medium
undici vulnerable to cross-user cache disclosure via same-origin redirect
- undici
- Broken access control
- CWE-524