28 matches found
CLEANSTART-2026-KH02921 undici's dump interceptor reads and discards a response body up to a configurable maximum size
Security vulnerability affects the renovate package. undici's dump interceptor reads and discards a response body up to a configurable maximum size...
CLEANSTART-2026-MV66372 undici's dump interceptor reads and discards a response body up to a configurable maximum size
CVE-2026-84947 affects multiple packages. undici's dump interceptor reads and discards a response body up to a configurable maximum size. See references for individual vulnerability details...
CLEANSTART-2026-PK15344 undici's dump interceptor reads and discards a response body up to a configurable maximum size
Security vulnerability affects the n8n package. undici's dump interceptor reads and discards a response body up to a configurable maximum size...
PT-2026-117829
Security vulnerability affects the n8n package. undici's dump interceptor reads and discards a response body up to a configurable maximum size...
CLEANSTART-2026-QE41365 undici's dump interceptor reads and discards a response body up to a configurable maximum size
CVE-2026-84947 affects multiple packages. undici's dump interceptor reads and discards a response body up to a configurable maximum size. See references for individual vulnerability details...
NPM: undici vulnerable to response truncation via oversized chunked responses in the dump interceptor
NPM: undici vulnerable to response truncation via oversized chunked responses in the dump interceptor vulnerability discovered by ? in WordPress Npm undici versions = 7.1.0, 7.29.1...
EUVD-2026-71517
undici vulnerable to response truncation via oversized chunked responses in the dump interceptor...
CLEANSTART-2026-WI13010 undici's dump interceptor reads and discards a response body up to a configurable maximum size
Security vulnerability affects the langfuse package. undici's dump interceptor reads and discards a response body up to a configurable maximum size...
PT-2026-108563
Security vulnerability affects the langfuse package. undici's dump interceptor reads and discards a response body up to a configurable maximum size...
undici: Undici: Response truncation and connection termination
A flaw was found in undici, a Node.js HTTP/1.1 client. When the dump interceptor processes oversized chunked responses that do not declare a Content-Length, it prematurely signals completion. This causes the application to receive an incomplete or empty response body, while the network connection...
SUSE CVE-2026-84947
undici's dump interceptor reads and discards a response body up to a configurable maximum size. When a response declares a Content-Length that exceeds the maximum, the interceptor aborts cleanly, but when a response has no Content-Length and is chunked, the interceptor instead signals completion...
CVE-2026-84947
A flaw was found in undici, a Node.js HTTP/1.1 client. When the dump interceptor processes oversized chunked responses that do not declare a Content-Length, it prematurely signals completion. This causes the application to receive an incomplete or empty response body, while the network connection...
DEBIAN-CVE-2026-84947
undici's dump interceptor reads and discards a response body up to a configurable maximum size. When a response declares a Content-Length that exceeds the maximum, the interceptor aborts cleanly, but when a response has no Content-Length and is chunked, the interceptor instead signals completion...
CVE-2026-84947
undici's dump interceptor reads and discards a response body up to a configurable maximum size. When a response declares a Content-Length that exceeds the maximum, the interceptor aborts cleanly, but when a response has no Content-Length and is chunked, the interceptor instead signals completion...
UBUNTU-CVE-2026-84947
undici's dump interceptor reads and discards a response body up to a configurable maximum size. When a response declares a Content-Length that exceeds the maximum, the interceptor aborts cleanly, but when a response has no Content-Length and is chunked, the interceptor instead signals completion...
CVE-2026-84947
undici's dump interceptor reads and discards a response body up to a configurable maximum size. When a response declares a Content-Length that exceeds the maximum, the interceptor aborts cleanly, but when a response has no Content-Length and is chunked, the interceptor instead signals completion...
CVE-2026-84947
CVE-2026-84947 affects undici , a Node.js HTTP/1.1 client library, in versions 7.1.0 through 7.29.1 and 8.0.0 through 8.10.2 . The dump interceptor mishandles oversized chunked responses that declare no Content-Length: it signals completion early once the accumulated size reaches the configurable...
CVE-2026-84947 undici vulnerable to response truncation via oversized chunked responses in the dump interceptor
undici's dump interceptor reads and discards a response body up to a configurable maximum size. When a response declares a Content-Length that exceeds the maximum, the interceptor aborts cleanly, but when a response has no Content-Length and is chunked, the interceptor instead signals completion...
CVE-2026-84947
undici's dump interceptor reads and discards a response body up to a configurable maximum size. When a response declares a Content-Length that exceeds the maximum, the interceptor aborts cleanly, but when a response has no Content-Length and is chunked, the interceptor instead signals completion...
CVE-2026-84947 undici vulnerable to response truncation via oversized chunked responses in the dump interceptor
undici's dump interceptor reads and discards a response body up to a configurable maximum size. When a response declares a Content-Length that exceeds the maximum, the interceptor aborts cleanly, but when a response has no Content-Length and is chunked, the interceptor instead signals completion...