undici vulnerabilities

An HTTP/1.1 client, written from scratch for Node.js

7.15.0

7 years ago

11 days ago

Known vulnerabilities in the undici package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
L Missing Release of Memory after Effective Lifetime	<5.29.0>=6.0.0 <6.21.2>=7.0.0 <7.5.0
H Insecure Randomness	>=4.5.0 <5.28.5>=6.0.0 <6.21.1>=7.0.0 <7.2.3
M Access of Memory Location After End of Buffer	>=6.14.0 <6.19.2
L Improper Authorization	<5.28.4>=6.0.0 <6.11.1
L Improper Access Control	<5.28.4>=6.0.0 <6.11.1
M Denial of Service (DoS)	>=6.0.0 <6.6.1
L Permissive Cross-domain Policy with Untrusted Domains	<5.28.3>=6.0.0 <6.6.1
L Information Exposure	<5.26.2
H Regular Expression Denial of Service (ReDoS)	<5.19.1
M CRLF Injection	>=2.0.0 <5.19.1
M CRLF Injection	<5.8.2
M Server-side Request Forgery (SSRF)	<5.8.2
L Information Exposure	<5.8.0
M CRLF Injection	<5.8.0
M Improper Certificate Validation	>=4.8.2 <5.5.1

100 VERSIONS IN TOTAL See all versions