undici vulnerable to downstream response desynchronization via retry interceptor

undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields

undici vulnerable to Denial of Service via orphaned RetryHandler response body

undici vulnerable to Denial of Service via unbounded decompression of compressed responses

undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression

undici vulnerable to cross-user information disclosure via shared cache whitespace bypass

undici vulnerable to HTTP header injection via Set-Cookie percent-decoding

undici is vulnerable to Unbounded Memory Consumption in in Undici's DeduplicationHandler via Response Buffering leads to DoS

undici vulnerable to CRLF Injection via blob-like body 'type' property

undici vulnerable to response truncation via oversized chunked responses in the dump interceptor

undici vulnerable to caching and replay of unsafe HTTP method responses

undici is vulnerable to CRLF Injection via upgrade option