Linux Distros Unpatched Vulnerability : CVE-2026-87018

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici is an HTTP client library for Node.js. In versions 4.2.1 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, the client process crashes when ...

CVE-2026-87018

The undici HTTP client library for Node.js is vulnerable to a Denial of Service (DoS) in versions 4.2.1 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1. The root cause is an uncaught assertion triggered when a TLS 1.2 server performs a certificate-changing renegotiation. If the ser...

CVE-2026-87018 undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation

undici is an HTTP client library for Node.js. In versions 4.2.1 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, the client process crashes when a TLS 1.2 server renegotiates after the connection is established and presents a different, CA-trusted certificate whose hostname does no...