433 matches found
HTTP Response Desynchronization
undici is vulnerable to HTTP Response Desynchronization. The vulnerability is due to improper Content-Length handling after retrying or resuming partial responses, where a stale length can be retained for a differently sized response body, potentially causing downstream response desynchronization...
6.5CVSS5.5AI score0.00176EPSS
SaveExploits0References3Affected Software1
20