Live · 98 sources · updated 21m ago
The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

Clear

6 matching records.

  1. CVE NVD

    undici is an HTTP client for Node.js.

    undici is an HTTP client for Node.js. In versions 7.30.1 and 8.12.2 through 8.12.3, when an originless Agent composes the redirect and shared cache interceptors, undici decides whether to store the final response under the…

    CVSS 7.4 Fix available CVE-2026-116592 Undici Developer platform
  2. CVE NVD

    undici is an HTTP client for Node.js.

    undici is an HTTP client for Node.js. In versions 7.0.0 through 7.30.1 and 8.0.0 through 8.12.3, when an Agent composes the redirect and shared cache interceptors, a cached response that is revalidated with a conditional request…

    CVSS 5.9 Fix available CVE-2026-116630 Undici Developer platform
  3. CVE NVD

    undici is an HTTP client for Node.js.

    undici is an HTTP client for Node.js. In versions 7.0.0 through 7.30.1 and 8.0.0 through 8.12.3, when the redirect interceptor and a shared response cache are used together, an authenticated request that is redirected to a…

    CVSS 6.5 Fix available CVE-2026-120474 Undici Developer platform
  4. CVE NVD

    undici is an HTTP client for Node.js.

    undici is an HTTP client for Node.js. In versions 7.15.0 through 7.30.1 and 8.0.0 through 8.12.3, fetch verifies Subresource Integrity metadata by splitting the integrity string on a single space, but the SRI grammar separates…

    CVSS 5.9 Fix available CVE-2026-120423 Undici Developer platform
  5. CVE NVD

    undici is an HTTP client for Node.js.

    undici is an HTTP client for Node.js. In versions 7.0.0 through 7.30.1 and 8.0.0 through 8.12.3, the redirect interceptor strips sensitive headers such as Authorization, Cookie, Proxy-Authorization, and Host when a request is…

    CVSS 5.9 Fix available CVE-2026-120415 Undici Developer platform
  6. CVE NVD

    undici is an HTTP client for Node.js.

    undici is an HTTP client for Node.js. In versions 7.0.0 through 7.30.1 and 8.0.0 through 8.12.3, when the cache interceptor is composed with a downstream handler that throws during response processing (such as the built-in dump…

    CVSS 5.9 Fix available CVE-2026-120222 Undici Developer platform

Reuse this view

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Undici&limit=100. RSS for this section: feed.xml.

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help