Undici WebSocket Client Vulnerable To Denial Of Service Via Unbounded Automatic PONG Buffering

Impact undici's WebSocket client including Node.js's bundled "globalThis.WebSocket" can be driven to exhaust process memory by a malicious or compromised WebSocket server. For every PING frame received, the receiver automatically writes a PONG response to the socket and ignores the "false" return...