22999 matches found
GHSA-M8RV-5G2X-5CG5 undici vulnerable to CRLF Injection via blob-like body 'type' property
Impact When an application passes a duck-typed blob-like body to undici's HTTP/1.1 dispatcher via request, stream, pipeline, or dispatch with a .type derived from untrusted input, an attacker can inject CRLF sequences \r\n to append arbitrary HTTP headers and potentially smuggle a second request...
4.2CVSS7.3AI score0.00142EPSS
SaveExploits0References10
20