undici vulnerabilities

Newest CVEs

• CVE-2026-87029

  undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor

  undici · undici

  Medium5.9
• CVE-2026-109932

  undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering

  undici · undici

  Medium5.9
• CVE-2026-87018

  undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation

  undici · undici

  High7.5
• CVE-2026-109383

  undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent

  undici · undici

  High7.4
• CVE-2026-109829

  undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects

  undici · undici

  High7.4
• CVE-2026-109841

  undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens

  undici · undici

  Medium5.9
• CVE-2026-109924

  undici vulnerable to Denial of Service via unbounded memory in the EventSource parser

  undici · undici

  Medium5.9
• CVE-2026-109869

  undici vulnerable to Denial of Service via unhandled error on excessive content-encodings

  undici · undici

  High7.5
• CVE-2026-109855

  undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake

  undici · undici

  High7.5
• CVE-2026-18149

  undici vulnerable to Denial of Service via orphaned RetryHandler response body

  undici · undici

  Medium5.9