Lucene search
K

EUVD-2026-37764

๐Ÿ—“๏ธย 19 Jun 2026ย 14:21:30Reported byย EUVDTypeย 
euvd
ย euvd
๐Ÿ”—ย euvd.enisa.europa.eu๐Ÿ‘ย 8ย Views

undici cookie parser decodes values, enabling header injection when forwarded; upgrade to safe versions.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
Amazon
Important: nodejs22
7 Jul 202600:00
โ€“amazon
Chainguard
CVE-2026-9679 vulnerabilities
23 Jun 202608:16
โ€“cgr
Circl
CVE-2026-9679
17 Jun 202616:59
โ€“circl
CVE
CVE-2026-9679
17 Jun 202616:56
โ€“cve
Cvelist
CVE-2026-9679 undici vulnerable to HTTP header injection via Set-Cookie percent-decoding
17 Jun 202616:56
โ€“cvelist
Debian CVE
CVE-2026-9679
17 Jun 202616:56
โ€“debiancve
Github Security Blog
undici vulnerable to HTTP header injection via Set-Cookie percent-decoding
19 Jun 202614:21
โ€“github
NVD
CVE-2026-9679
17 Jun 202618:18
โ€“nvd
Tenable Nessus
openSUSE 16 Security Update : nodejs22 (openSUSE-SU-2026:21058-1)
1 Jul 202600:00
โ€“nessus
Tenable Nessus
SUSE SLES15 Security Update : nodejs24 (SUSE-SU-2026:2633-1)
26 Jun 202600:00
โ€“nessus
Rows per page
[
  {
    "enisaIdVendor": [
      {
        "id": "3fd9b3ad-83b4-3d9d-8503-68a1449cf18a",
        "vendor": {
          "name": "undici"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "251da274-af0a-3f4f-b380-5a3acc1794cc",
        "product": {
          "name": "undici",
          "vendor": {
            "name": "undici"
          }
        },
        "product_version": "8.0.0 <8.5.0"
      },
      {
        "id": "ba527afc-0ad3-3e32-b2d4-7ff1a6ea37c4",
        "product": {
          "name": "undici",
          "vendor": {
            "name": "undici"
          }
        },
        "product_version": "0 <6.26.0"
      },
      {
        "id": "c420e8ef-d810-34a8-85ba-27b189c88089",
        "product": {
          "name": "undici",
          "vendor": {
            "name": "undici"
          }
        },
        "product_version": "7.0.0 <7.28.0"
      }
    ]
  }
]

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

19 Jun 2026 14:21Current
5.8Medium risk
Vulners AI Score5.8
CVSS 3.15.9
EPSS0.00257
8