Homepage

org.webjars.npm:undici

Licenses: MIT
Published: 4 years ago Last updated: 2 months ago Latest version: 7.27.1

License

MIT[4.12.2,);
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the org.webjars.npm:undici package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
Improper Neutralization

[,6.28.0)[7.0.0,7.29.0)[8.0.0,8.9.0)
  • M
HTTP Request Smuggling

[,6.28.0)[7.0.0,7.29.0)[8.0.0,8.9.0)
  • L
CRLF Injection

[,6.28.0)[7.0.0,7.29.0)[8.0.0,8.9.0)
  • H
Information Exposure

[7.0.0,7.29.0)[8.0.0,8.9.0)
  • H
Interpretation Conflict

[7.0.0,7.29.0)[8.0.0,8.9.0)
  • H
Origin Validation Error

[7.27.1,)
  • H
Use of Cache Containing Sensitive Information

[7.12.0,)
  • M
Time-of-check Time-of-use (TOCTOU) Race Condition

[0,)
  • H
Allocation of Resources Without Limits or Throttling

[0,)
  • H
Permissive List of Allowed Inputs

[,6.27.0)[7.0.0,7.28.0)[8.0.0,8.5.0)
  • C
CRLF Injection

[,6.27.0)[7.0.0,7.28.0)[8.0.0,8.5.0)
  • H
Allocation of Resources Without Limits or Throttling

[8.0.0,8.5.0)
  • M
Improper Certificate Validation

[7.23.0,7.28.0)[8.0.0,8.5.0)
  • M
HTTP Request Smuggling

[,7.27.1)
  • H
Uncaught Exception

[,7.27.1)
  • H
Improper Handling of Highly Compressed Data (Data Amplification)

[,7.27.1)
  • H
Uncaught Exception

[,7.27.1)
  • M
CRLF Injection

[,7.27.1)
  • M
Allocation of Resources Without Limits or Throttling

[,7.27.1)
  • L
Missing Release of Memory after Effective Lifetime

[,5.29.0)
  • H
Insecure Randomness

[,7.12.0)
  • L
Improper Authorization

[,5.28.4)
  • L
Improper Access Control

[,5.28.4)
  • L
Permissive Cross-domain Policy with Untrusted Domains

[,5.28.3)
  • L
Information Exposure

[,5.27.0)
  • H
Regular Expression Denial of Service (ReDoS)

[,5.20.0)
  • M
CRLF Injection

[,5.20.0)
  • M
CRLF Injection

[,5.10.0)
  • M
Server-side Request Forgery (SSRF)

[,5.10.0)
  • L
Information Exposure

[,5.10.0)
  • M
CRLF Injection

[,5.10.0)
  • M
Improper Certificate Validation

[4.8.2,5.5.1)

Package versions

18 VERSIONS IN TOTAL See all versions
versionpublisheddirect vulnerabilities
7.27.15 Jun, 2026
  • 1
    C
  • 6
    H
  • 4
    M
  • 1
    L
7.16.018 Dec, 2025
  • 1
    C
  • 8
    H
  • 6
    M
  • 1
    L
7.12.018 Jul, 2025
  • 1
    C
  • 8
    H
  • 6
    M
  • 1
    L
6.23.010 Feb, 2026
  • 1
    C
  • 6
    H
  • 6
    M
  • 1
    L
5.29.014 May, 2025
  • 1
    C
  • 6
    H
  • 6
    M
  • 1
    L
5.28.412 Jul, 2024
  • 1
    C
  • 6
    H
  • 6
    M
  • 2
    L
5.28.317 Feb, 2024
  • 1
    C
  • 6
    H
  • 6
    M
  • 4
    L
5.27.223 Nov, 2023
  • 1
    C
  • 6
    H
  • 6
    M
  • 5
    L
5.27.03 Nov, 2023
  • 1
    C
  • 6
    H
  • 6
    M
  • 5
    L
5.24.014 Sep, 2023
  • 1
    C
  • 6
    H
  • 6
    M
  • 6
    L