125 matches found
undici: undici: Subresource Integrity bypass via non-lowercase algorithm tokens
A flaw was found in undici. The HTTP client improperly handles case sensitivity when verifying Subresource Integrity SRI algorithm tokens. When an application specifies an uppercase or mixed-case algorithm name, undici treats the token as unrecognized and skips verification instead of enforcing i...
7.5CVSS5.8AI score0.0025EPSS
SaveExploits0References7
20