Skip to content

CVE record · 1 source

CVE-2026-109924

CVSS 5.9

undici is an HTTP client library for Node.js.

Vendor: Node.js
Product: Node.js
CVSS: 5.9
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

8

CVE NVD 16d ago

undici is an HTTP client library for Node.js.

undici is an HTTP client library for Node.js. In versions 6.5.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its EventSource client can be driven to exhaust process memory by a malicious or compromised…

CVSS 5.9 CVE-2026-109924 Node.js