30 matches found
CVE-2026-124574
The chenyme grok2api software, version 3.1.6 and below , contains a vulnerability in the Video Job Retry Handler component. Specifically, the beginSelectionSession function in backend/internal/application/gateway/video.go is susceptible to improper authorization , which could allow for remote att...
EUVD-2026-119862
A vulnerability was determined in chenyme grok2api up to 3.1.6. This vulnerability affects the function beginSelectionSession of the file backend/internal/application/gateway/video.go of the component Video Job Retry Handler. This manipulation causes improper authorization. It is possible to...
CLEANSTART-2026-UL15265 undici's retry handler can leave an already-exposed response body pending forever
Security vulnerability affects the renovate package. undici's retry handler can leave an already-exposed response body pending forever...
CLEANSTART-2026-DL95633 undici's retry handler can leave an already-exposed response body pending forever
CVE-2026-18149 affects multiple packages. undici's retry handler can leave an already-exposed response body pending forever. See references for individual vulnerability details...
CLEANSTART-2026-TC48038 undici's retry handler can leave an already-exposed response body pending forever
Security vulnerability affects the n8n package. undici's retry handler can leave an already-exposed response body pending forever...
PT-2026-117862
Security vulnerability affects the n8n package. undici's retry handler can leave an already-exposed response body pending forever...
CLEANSTART-2026-WL07802 undici's retry handler can leave an already-exposed response body pending forever
CVE-2026-18149 affects multiple packages. undici's retry handler can leave an already-exposed response body pending forever. See references for individual vulnerability details...
EUVD-2026-71617
undici vulnerable to Denial of Service via orphaned RetryHandler response body...
CLEANSTART-2026-TI91814 undici's retry handler can leave an already-exposed response body pending forever
Security vulnerability affects the langfuse package. undici's retry handler can leave an already-exposed response body pending forever...
PT-2026-108537
Security vulnerability affects the langfuse package. undici's retry handler can leave an already-exposed response body pending forever...
Amazon Linux 2023 : nodejs24, nodejs24-devel, nodejs24-full-i18n (ALAS2023-2026-3107)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3107 advisory. undici's retry handler can leave an already-exposed response body pending forever. When a server returns a successful response that declares a Content-Length, sends only part of the body, and...
Important: nodejs24
Issue Overview: undici's retry handler can leave an already-exposed response body pending forever. When a server returns a successful response that declares a Content-Length, sends only part of the body, and closes the connection, the retry handler retries the request. If the retry returns a...
undici: undici: Denial of Service due to orphaned response body in retry handler
A flaw was found in undici. A remote attacker, by controlling a server, could exploit a vulnerability in undici's retry handler. When a server sends an incomplete response body and then a non-retryable status, the original response body can become orphaned and never properly closed. This leads to...
SUSE CVE-2026-18149
undici's retry handler can leave an already-exposed response body pending forever. When a server returns a successful response that declares a Content-Length, sends only part of the body, and closes the connection, the retry handler retries the request. If the retry returns a non-retryable status...
CVE-2026-18149
A flaw was found in undici. A remote attacker, by controlling a server, could exploit a vulnerability in undici's retry handler. When a server sends an incomplete response body and then a non-retryable status, the original response body can become orphaned and never properly closed. This leads to...
AZL-99942 CVE-2026-18149 affecting package nodejs for versions less than 24.21.0-1
undici's retry handler can leave an already-exposed response body pending forever. When a server returns a successful response that declares a Content-Length, sends only part of the body, and closes the connection, the retry handler retries the request. If the retry returns a non-retryable status...
DEBIAN-CVE-2026-18149
undici's retry handler can leave an already-exposed response body pending forever. When a server returns a successful response that declares a Content-Length, sends only part of the body, and closes the connection, the retry handler retries the request. If the retry returns a non-retryable status...
CVE-2026-18149
undici's retry handler can leave an already-exposed response body pending forever. When a server returns a successful response that declares a Content-Length, sends only part of the body, and closes the connection, the retry handler retries the request. If the retry returns a non-retryable status...
CVE-2026-18149
undici's retry handler can leave an already-exposed response body pending forever. When a server returns a successful response that declares a Content-Length, sends only part of the body, and closes the connection, the retry handler retries the request. If the retry returns a non-retryable status...
UBUNTU-CVE-2026-18149
undici's retry handler can leave an already-exposed response body pending forever. When a server returns a successful response that declares a Content-Length, sends only part of the body, and closes the connection, the retry handler retries the request. If the retry returns a non-retryable status...