PT-2022-7066 · Undici +7 · Undici +7

Name of the Vulnerable Software and Affected Versions: Undici versions prior to 5.26.2 Description: The issue is related to the handling of headers in the Undici HTTP/1.1 client for Node.js. Specifically, prior to version 5.26.2, Undici cleared Authorization headers on cross-origin redirects but...