Skip to content

CVE record · 1 source

CVE-2026-116630

CVSS 5.9

undici is an HTTP client for Node.js.

Vendor: Undici
Product: undici
CVSS v3.1: 5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-346, CWE-524
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

28

CVE NVD 12h ago

undici is an HTTP client for Node.js.

undici is an HTTP client for Node.js. In versions 7.0.0 through 7.30.1 and 8.0.0 through 8.12.3, when an Agent composes the redirect and shared cache interceptors, a cached response that is revalidated with a conditional request…

CVSS 5.9 Fix available CVE-2026-116630 Undici