CVE-2022-35949

undici is an HTTP/1.1 client, written from scratch for Node.js."undici" is vulnerable to SSRF Server-side Request Forgery when an application takes in user input into the "path/pathname" option of "undici.request". If a user specifies a URL such as "http://127.0.0.1" or "//127.0.0.1" "js const...