undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse

undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches

undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor

undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering

undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation

undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens

undici vulnerable to Denial of Service via unbounded memory in the EventSource parser

undici vulnerable to Denial of Service via unhandled error on excessive content-encodings

undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake

undici vulnerable to Denial of Service via unrequested WebSocket subprotocol

undici vulnerable to Denial of Service via WebSocketStream unclean close

undici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directives

undici WebSocket client vulnerable to denial of service via cumulative fragment bypass

undici WebSocket client vulnerable to denial of service via fragment count bypass

undici is vulnerable to Unhandled Exception in undici WebSocket Client Due to Invalid server_max_window_bits Validation

undici is vulnerable to Malicious WebSocket 64-bit length overflows undici parser and crashes the client

undici is vulnerable to Unbounded Memory Consumption in undici WebSocket permessage-deflate Decompression

Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion

Undici is an HTTP/1.1 client for Node.js

undici vulnerable to cross-origin cache poisoning via missing origin isolation in interceptors

undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent