undici vulnerable to Denial of Service via orphaned RetryHandler response body

Impact undici's RetryHandler can leave a response body pending indefinitely. When a retried request receives a non-retryable response after a truncated one, the original response.body held by the application is never settled, so reads such as response.body.text hang and bodyTimeout does not fire....

GHSA-PMJH-FQ2X-6V4X undici vulnerable to Denial of Service via orphaned RetryHandler response body

Impact undici's RetryHandler can leave a response body pending indefinitely. When a retried request receives a non-retryable response after a truncated one, the original response.body held by the application is never settled, so reads such as response.body.text hang and bodyTimeout does not fire....