<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: undici</title><description>Every new CVE for undici.</description><link>https://agentprime.io/</link><item><title>CVE-2026-116630: undici vulnerable to cross-user information disclosure via cross-origin redirect revalidation</title><link>https://agentprime.io/advisories/CVE-2026-116630/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-116630/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 06 Nov 2026 10:13:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-120415: undici vulnerable to cross-origin credential disclosure via array-of-tuples headers bypassing redirect stripping</title><link>https://agentprime.io/advisories/CVE-2026-120415/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-120415/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 06 Nov 2026 10:10:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-120423: undici vulnerable to Subresource Integrity bypass via whitespace in integrity metadata</title><link>https://agentprime.io/advisories/CVE-2026-120423/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-120423/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 06 Nov 2026 10:08:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-116592: undici vulnerable to cache poisoning and cross-user disclosure via intermediate redirect hops</title><link>https://agentprime.io/advisories/CVE-2026-116592/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-116592/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 06 Nov 2026 10:05:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-120222: undici vulnerable to Denial of Service via unhandled exception in cache-interceptor response replay</title><link>https://agentprime.io/advisories/CVE-2026-120222/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-120222/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 06 Nov 2026 10:00:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-120474: undici vulnerable to cross-user cache disclosure via same-origin redirect</title><link>https://agentprime.io/advisories/CVE-2026-120474/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-120474/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 06 Nov 2026 09:57:46 GMT</pubDate><category>CVE</category></item></channel></rss>