NPM: undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression

NPM: undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression vulnerability discovered by ? in WordPress Npm undici versions = 6.25.0, 6.28.1...

undici 安全漏洞

Undici is an open-source HTTP/1.1 client developed by Node.js. Undici has a security vulnerability that stems from unlimited memory consumption during the decompression of permessage-deflate. This vulnerability could allow malicious WebSocket servers to send small compressed frames, causing the...