CLEANSTART-2026-RA54974 undici's retry interceptor can append the body of a ranged retry response to bytes already delivered from an earlier partial response while still presenting the original response's status and headers

🗓️ 15 Sep 2026 01:23:42Reported by GoogleType

osv🔗 osv.dev👁 17 Views

undici retry interceptor appends ranged retry body to partial response bytes with original status.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions	20 Aug 202615:19	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in the minimatch package affects IBM® Db2® Big SQL on IBM Cloud Pak for Data.	15 May 202614:43	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in brace-expansion	8 Sep 202609:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple node modules.	21 Apr 202618:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - IoT Component uses multiple third party dependencies which is vulnerable to multiple CVEs.	1 Apr 202607:22	–	ibm
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains a potential denial of service (DoS) vulnerability	10 Apr 202613:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affects IBM Db2 Big SQL on IBM Software Hub	10 Sep 202610:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in watsonx.data	15 Sep 202610:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses multiple dependencies which are vulnerable to multiple CVEs.	30 Jul 202615:35	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	18 Sep 202614:37	–	ibm

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-RA54974.json
osv	www.osv.dev/vulnerability/CVE-2021-43616
osv	www.osv.dev/vulnerability/CVE-2026-11525
osv	www.osv.dev/vulnerability/CVE-2026-12151
osv	www.osv.dev/vulnerability/CVE-2026-13149
osv	www.osv.dev/vulnerability/CVE-2026-14257
osv	www.osv.dev/vulnerability/CVE-2026-15157
osv	www.osv.dev/vulnerability/CVE-2026-16728
osv	www.osv.dev/vulnerability/CVE-2026-16729
osv	www.osv.dev/vulnerability/CVE-2026-18540

18 Sep 2026 12:17Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.19.8

EPSS0.02724

undici retry interceptor response corruption npm package data integrity