CLEANSTART-2026-PK15344 undici's dump interceptor reads and discards a response body up to a configurable maximum size

🗓️ 10 Oct 2026 00:47:55Reported by GoogleType

osv-cleanstart🔗 osv.dev👁 5 Views

The n8n package allows undici's dump interceptor to read and discard response bodies.

Reporter	Title	Published	Views	Family All 100
IBM Security Bulletins	Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in undici (CVE-2026-18149, CVE-2026-18540, CVE-2026-19534, CVE-2026-84890, CVE-2026-84933, CVE-2026-84947, CVE-2026-84961, CVE-2026-85008, CVE-2026-85014, CVE-2026-85024)	15 Oct 202620:17	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator in IBM Integration is vulnerable to multiple vulnerabilities in undici	14 Oct 202615:07	–	ibm
Tenable Nessus	Amazon Linux 2023 : nodejs24, nodejs24-devel, nodejs24-full-i18n (ALAS2023-2026-3107)	29 Sep 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-84947	4 Sep 202600:00	–	nessus
Amazon	Important: nodejs24	29 Sep 202600:00	–	amazon
Chainguard	CVE-2026-84947 vulnerabilities	17 Sep 202602:54	–	cgr
Circl	CVE-2026-84947	4 Sep 202616:55	–	circl
CVE	CVE-2026-84947	4 Sep 202616:53	–	cve
Cvelist	CVE-2026-84947 undici vulnerable to response truncation via oversized chunked responses in the dump interceptor	4 Sep 202616:53	–	cvelist
Debian CVE	CVE-2026-84947	4 Sep 202616:53	–	debiancve

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-PK15344.json
osv	www.osv.dev/vulnerability/CVE-2026-84947
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-84947

10 Oct 2026 01:00Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.15.3

EPSS0.00196

n8n undici dump interceptor response body