UN
Product
undici
39
CVEs
0
On KEV
9.8
Max CVSS
9
New 30D
Severity mix
Critical 5High 19Medium 12Low 3
Watch
Add undici to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-18540 | 3.7 | Sep 4 | undici vulnerable to downstream response splitting via retry interceptor Affected: before 6.28.1; 7.0.0 before 7.29.1; 8.0.0 before 8.10.2 |
| CVE-2026-11525 | 3.7 | Jun 17 | undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching Affected: before 6.26.0; 7.0.0 before 7.28.0; 8.0.0 before 8.5.0 |
| CVE-2026-6733 | 3.7 | Jun 17 | undici vulnerable to HTTP response queue poisoning via keep-alive socket reuse Affected: before 6.26.0; 7.0.0 before 7.28.0; 8.0.0 before 8.5.0 |
Showing 3