CVE-2026-109829

The undici HTTP client library for Node.js versions 7.0.0–7.30.0 and 8.0.0–8.12.1 is vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects. This occurs when an originless Agent uses a shared cache store and composes redirect and cache interceptors in a specific order,...