Skip to content

CVE record · 1 source

CVE-2026-120222

CVSS 5.9

undici is an HTTP client for Node.js.

Vendor: Undici
Product: undici
CVSS v3.1: 5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-248, CWE-755
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

28

CVE NVD 13h ago

undici is an HTTP client for Node.js.

undici is an HTTP client for Node.js. In versions 7.0.0 through 7.30.1 and 8.0.0 through 8.12.3, when the cache interceptor is composed with a downstream handler that throws during response processing (such as the built-in dump…

CVSS 5.9 Fix available CVE-2026-120222 Undici