CLEANSTART-2026-PK15344 undici's dump interceptor reads and discards a response body up to a configurable maximum size

Security vulnerability affects the n8n package. undici's dump interceptor reads and discards a response body up to a configurable maximum size...

CLEANSTART-2026-QE41365 undici's dump interceptor reads and discards a response body up to a configurable maximum size

CVE-2026-84947 affects multiple packages. undici's dump interceptor reads and discards a response body up to a configurable maximum size. See references for individual vulnerability details...

EUVD-2026-71517

undici vulnerable to response truncation via oversized chunked responses in the dump interceptor...

NPM: undici vulnerable to response truncation via oversized chunked responses in the dump interceptor

NPM: undici vulnerable to response truncation via oversized chunked responses in the dump interceptor vulnerability discovered by ? in WordPress Npm undici versions = 7.1.0, 7.29.1...

CLEANSTART-2026-WI13010 undici's dump interceptor reads and discards a response body up to a configurable maximum size

Security vulnerability affects the langfuse package. undici's dump interceptor reads and discards a response body up to a configurable maximum size...

PT-2026-108563

Security vulnerability affects the langfuse package. undici's dump interceptor reads and discards a response body up to a configurable maximum size...

undici: Undici: Response truncation and connection termination

A flaw was found in undici, a Node.js HTTP/1.1 client. When the dump interceptor processes oversized chunked responses that do not declare a Content-Length, it prematurely signals completion. This causes the application to receive an incomplete or empty response body, while the network connection...

SUSE CVE-2026-84947

undici's dump interceptor reads and discards a response body up to a configurable maximum size. When a response declares a Content-Length that exceeds the maximum, the interceptor aborts cleanly, but when a response has no Content-Length and is chunked, the interceptor instead signals completion...

CVE-2026-84947

A flaw was found in undici, a Node.js HTTP/1.1 client. When the dump interceptor processes oversized chunked responses that do not declare a Content-Length, it prematurely signals completion. This causes the application to receive an incomplete or empty response body, while the network connection...

DEBIAN-CVE-2026-84947

undici's dump interceptor reads and discards a response body up to a configurable maximum size. When a response declares a Content-Length that exceeds the maximum, the interceptor aborts cleanly, but when a response has no Content-Length and is chunked, the interceptor instead signals completion...

CVE-2026-84947

undici's dump interceptor reads and discards a response body up to a configurable maximum size. When a response declares a Content-Length that exceeds the maximum, the interceptor aborts cleanly, but when a response has no Content-Length and is chunked, the interceptor instead signals completion...

CVE-2026-84947

undici's dump interceptor reads and discards a response body up to a configurable maximum size. When a response declares a Content-Length that exceeds the maximum, the interceptor aborts cleanly, but when a response has no Content-Length and is chunked, the interceptor instead signals completion...

UBUNTU-CVE-2026-84947

undici's dump interceptor reads and discards a response body up to a configurable maximum size. When a response declares a Content-Length that exceeds the maximum, the interceptor aborts cleanly, but when a response has no Content-Length and is chunked, the interceptor instead signals completion...

CVE-2026-84947 undici vulnerable to response truncation via oversized chunked responses in the dump interceptor

undici's dump interceptor reads and discards a response body up to a configurable maximum size. When a response declares a Content-Length that exceeds the maximum, the interceptor aborts cleanly, but when a response has no Content-Length and is chunked, the interceptor instead signals completion...

CVE-2026-84947

undici's dump interceptor reads and discards a response body up to a configurable maximum size. When a response declares a Content-Length that exceeds the maximum, the interceptor aborts cleanly, but when a response has no Content-Length and is chunked, the interceptor instead signals completion...

CVE-2026-84947 undici vulnerable to response truncation via oversized chunked responses in the dump interceptor

undici's dump interceptor reads and discards a response body up to a configurable maximum size. When a response declares a Content-Length that exceeds the maximum, the interceptor aborts cleanly, but when a response has no Content-Length and is chunked, the interceptor instead signals completion...

CVE-2026-84947

undici's dump interceptor reads and discards a response body up to a configurable maximum size. When a response declares a Content-Length that exceeds the maximum, the interceptor aborts cleanly, but when a response has no Content-Length and is chunked, the interceptor instead signals completion...

CVE-2026-84947

CVE-2026-84947 affects undici , a Node.js HTTP/1.1 client library, in versions 7.1.0 through 7.29.1 and 8.0.0 through 8.10.2 . The dump interceptor mishandles oversized chunked responses that declare no Content-Length: it signals completion early once the accumulated size reaches the configurable...

CVE-2026-84947 undici vulnerable to response truncation via oversized chunked responses in the dump interceptor

undici's dump interceptor reads and discards a response body up to a configurable maximum size. When a response declares a Content-Length that exceeds the maximum, the interceptor aborts cleanly, but when a response has no Content-Length and is chunked, the interceptor instead signals completion...

PT-2026-86153

Name of the Vulnerable Software and Affected Versions undici versions 7.1.0 through 7.29.0 undici versions 8.0.0 through 8.10.1 Description The dump interceptor reads and discards response bodies up to a configurable maximum size. When a response is chunked and lacks a Content-Length, the...