Lucene search
+L

1 matches found

OSV
OSV
added 2024/04/04 3:15 p.m.9 views

AZL-39773 CVE-2024-30261 affecting package nodejs for versions less than 20.14.0-1

Undici is an HTTP/1.1 client, written from scratch for Node.js. An attacker can alter the integrity option passed to fetch, allowing fetch to accept requests as valid even if they have been tampered. This vulnerability was patched in versions 5.28.4 and 6.11.1...

3.5CVSS6.7AI score0.00803EPSS
SaveExploits1References1
Rows per page
Query Builder