2127 matches found
CVE-2026-21636
CVE-2026-21636 - Node.js Permission Model UDS/Network Bypass Vulnerability summary The Node.js permission model --permission is designed to sandbox a process by restricting access to the filesystem, child processes, workers, and network. CVE-2026-21636 reveals that connections made via undici/fet...
ROOT-APP-NPM-CVE-2026-2229 CVE-2026-2229 in undici - Patched by Root
Root has patched CVE-2026-2229 in the undici package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-1525 CVE-2026-1525 in undici - Patched by Root
Root has patched CVE-2026-1525 in the undici package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-1527 CVE-2026-1527 in undici - Patched by Root
Root has patched CVE-2026-1527 in the undici package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2024-10065 AIKIDO-2024-10065 in undici - Patched by Root
Root has patched AIKIDO-2024-10065 in the undici package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-22150 CVE-2025-22150 in undici - Patched by Root
Root has patched CVE-2025-22150 in the undici package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-1526 CVE-2026-1526 in undici - Patched by Root
Root has patched CVE-2026-1526 in the undici package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-22036 CVE-2026-22036 in undici - Patched by Root
Root has patched CVE-2026-22036 in the undici package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-12151 CVE-2026-12151 in undici - Patched by Root
Root has patched CVE-2026-12151 in the undici package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-87018 CVE-2026-87018 in undici - Patched by Root
Root has patched CVE-2026-87018 in the undici package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-109383 CVE-2026-109383 in undici - Patched by Root
Root has patched CVE-2026-109383 in the undici package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-47279 CVE-2025-47279 in undici - Patched by Root
Root has patched CVE-2025-47279 in the undici package for Root:npm. Multiple fixed versions available...
Amazon Linux 2023 : nodejs22, nodejs22-devel, nodejs22-full-i18n (ALAS2023-2026-3277)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3277 advisory. The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in...
EUVD-2026-102240
undici vulnerable to Denial of Service via unhandled error on excessive content-encodings...
EUVD-2026-102249
undici vulnerable to Denial of Service via unbounded memory in the EventSource parser...
EUVD-2026-102305
undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens...
undici: undici: Denial of Service via TLS renegotiation with mismatched certificate
A flaw was found in undici. A remote server can cause a Denial of Service DoS by initiating a Transport Layer Security TLS renegotiation and presenting a certificate with a mismatched hostname. Because the client application fails to properly handle the resulting verification error, an uncaught...
CLSA-2026-1792478858 TuxCare security update for undici (16 CVEs)
TuxCare rebuilt undici to address 16 CVEs. Fixed in 7.24.4-tuxcare.2...
CLEANSTART-2026-OA04032 undici's retry interceptor can append the body of a ranged retry response to bytes already delivered from an earlier partial response while still presenting the original response's status and headers
CVE-2026-18540 affects multiple packages. undici's retry interceptor can append the body of a ranged retry response to bytes already delivered from an earlier partial response while still presenting the original response's status and headers. See references for individual vulnerability details...