1 matches found
Important: nodejs24
Issue Overview: When undici parses a Set-Cookie header, it accepts any SameSite attribute value that contains Strict, Lax, or None as a substring, rather than the case-insensitive exact match specified by RFC 6265. Non-spec values are silently mapped to one of the three standard tokens:...
9.8CVSS7.3AI score0.03711EPSS
SaveExploits1
20