CVE-2024-38372

Undici is an HTTP/1.1 client, written from scratch for Node.js. Depending on network and process conditions of a "fetch" request, "response.arrayBuffer" might include portion of memory from the Node.js process. This has been patched in v6.19.2...

CVE-2024-38372: Insertion of Sensitive Information Into Sent Data

Undici is an HTTP/1.1 client, written from scratch for Node.js. Depending on network and process conditions of a fetch request, response.arrayBuffer might include portion of memory from the Node.js process. This has been patched in v6.19.2...