Lucene search
K

CVE-2026-9679

๐Ÿ—“๏ธย 17 Jun 2026ย 16:56:18Reported byย openjsTypeย 
cve
ย cve
๐Ÿ”—ย web.nvd.nist.gov๐Ÿ‘ย 40ย Views

CVE-2026-9679: Undici cookie parsing decodes percent escapes, enabling HTTP header injection.

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
Amazon
Important: nodejs22
7 Jul 202600:00
โ€“amazon
Chainguard
CVE-2026-9679 vulnerabilities
23 Jun 202608:16
โ€“cgr
Circl
CVE-2026-9679
17 Jun 202616:59
โ€“circl
Cvelist
CVE-2026-9679 undici vulnerable to HTTP header injection via Set-Cookie percent-decoding
17 Jun 202616:56
โ€“cvelist
Debian CVE
CVE-2026-9679
17 Jun 202616:56
โ€“debiancve
EUVD
EUVD-2026-37764
19 Jun 202614:21
โ€“euvd
Github Security Blog
undici vulnerable to HTTP header injection via Set-Cookie percent-decoding
19 Jun 202614:21
โ€“github
NVD
CVE-2026-9679
17 Jun 202618:18
โ€“nvd
Tenable Nessus
openSUSE 16 Security Update : nodejs22 (openSUSE-SU-2026:21058-1)
1 Jul 202600:00
โ€“nessus
Tenable Nessus
SUSE SLES15 Security Update : nodejs24 (SUSE-SU-2026:2633-1)
26 Jun 202600:00
โ€“nessus
Rows per page
NVD
Node
nodejsundiciRange<6.27.0node.js
OR
nodejsundiciRange7.0.0โ€“7.28.0node.js
OR
nodejsundiciRange8.0.0โ€“8.5.0node.js
[
  {
    "vendor": "undici",
    "product": "undici",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "versionType": "semver",
        "status": "affected",
        "version": "0",
        "lessThan": "6.26.0"
      },
      {
        "versionType": "semver",
        "status": "unaffected",
        "version": "6.26.0"
      },
      {
        "versionType": "semver",
        "status": "affected",
        "version": "7.0.0",
        "lessThan": "7.28.0"
      },
      {
        "versionType": "semver",
        "status": "unaffected",
        "version": "7.28.0"
      },
      {
        "versionType": "semver",
        "status": "affected",
        "version": "8.0.0",
        "lessThan": "8.5.0"
      },
      {
        "versionType": "semver",
        "status": "unaffected",
        "version": "8.5.0"
      }
    ],
    "packageURL": "pkg:npm/undici"
  }
]

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

25 Jun 2026 17:43Current
5.5Medium risk
Vulners AI Score5.5
CVSS 3.15.9
EPSS0.00257
SSVC
40