Skip to content
OpenAdvisories

Product · nodejs

undici

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2023-24807

    Undici vulnerable to Regular Expression Denial of Service in Headers

    Undici is an HTTP/1.1 client for Node.js. Prior to version 5.19.1, the `Headers.set()` and `Headers.append()` methods are vulnerable to Regular Expression Denial of Service (ReDoS) attacks when untrusted values are passed into the functions. This is due to th…

    nodejs undici nodejs node-undici Debian Alpine npm