Lucene search
+L

2 matches found

osv_ghsa
osv_ghsa
•added 2026/09/29 6:22 p.m.•19 views

GHSA-PMJH-FQ2X-6V4X undici vulnerable to Denial of Service via orphaned RetryHandler response body

Impact undici's RetryHandler can leave a response body pending indefinitely. When a retried request receives a non-retryable response after a truncated one, the original response.body held by the application is never settled, so reads such as response.body.text hang and bodyTimeout does not fire....

5.9CVSS5.4AI score0.00481EPSS
SaveExploits0References9
Github Security Blog
Github Security Blog
•added 2026/09/29 6:22 p.m.•46 views

undici vulnerable to Denial of Service via orphaned RetryHandler response body

Impact undici's RetryHandler can leave a response body pending indefinitely. When a retried request receives a non-retryable response after a truncated one, the original response.body held by the application is never settled, so reads such as response.body.text hang and bodyTimeout does not fire....

5.9CVSS5.4AI score0.00481EPSS
SaveExploits0References9Affected Software1
Rows per page
Query Builder