CVE-2026-18540

CVE-2026-18540 affects undici (Node.js HTTP client library). The retry interceptor can append the body of a ranged retry response to bytes already delivered from an earlier partial response, presenting the original status and headers. This causes the response body to exceed the observed Content-L...