Vulners
Lucene search
2 matches found
GHSA-5R9G-QH6M-JXFF CRLF Injection in Nodejs ‘undici’ via host
Impact undici library does not protect host HTTP header from CRLF injection vulnerabilities. Patches This issue was patched in Undici v5.19.1. Workarounds Sanitize the headers.host string before passing to undici. References Reported at https://hackerone.com/reports/1820955. Credits Thank you to...
4.6CVSS6.7AI score0.00337EPSS
Exploits1References6
CRLF Injection in Nodejs ‘undici’ via host
Impact undici library does not protect host HTTP header from CRLF injection vulnerabilities. Patches This issue was patched in Undici v5.19.1. Workarounds Sanitize the headers.host string before passing to undici. References Reported at https://hackerone.com/reports/1820955. Credits Thank you to...
6.5CVSS6.8AI score0.00337EPSS
Exploits1References6Affected Software1
20