Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2024/02/18 12:17 p.m.31 views

Node.js: fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect

The vulnerability in the undici library in Node.js was that the parseHashWithOptions function did not properly handle base64url encoded hashes and invalid hashes. This allowed resources to be loaded without the expected Subresource Integrity SRI checks being performed...

3.5CVSS4.3AI score0.00803EPSS
SaveExploits1
Rows per page
Query Builder