CVE-2026-87018

The undici HTTP client library for Node.js is vulnerable to a Denial of Service (DoS) in versions 4.2.1 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1. The root cause is an uncaught assertion triggered when a TLS 1.2 server performs a certificate-changing renegotiation. If the ser...