Vulnerabilities in undici
30 resultsVexday analysis
O undici registra 14 vulnerabilidades na base Vexday, com 8 divulgações nos últimos 90 dias indicando atividade recente de descobertas; nenhuma está sob exploração ativa (KEV) e não há críticas CVSS, reduzindo a urgência operacional imediata. A fraqueza dominante é CWE-770 (alocação de recursos sem limite apropriado), um padrão típico de negação de serviço que requer monitoramento em ambientes de alto volume.
CVE-2026-1527MEDIUMundici is vulnerable to CRLF Injection via upgrade optionEPSS 0.3%CVE-2026-6733LOWundici vulnerable to HTTP response queue poisoning via keep-alive socket reuseEPSS 0.3%CVE-2026-84961HIGHundici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPoolEPSS 0.2%CVE-2026-18540LOWundici vulnerable to downstream response splitting via retry interceptorEPSS 0.2%CVE-2026-11525LOWundici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matchingEPSS 0.2%CVE-2026-85152HIGHundici vulnerable to cross-origin cache poisoning via missing origin isolation in interceptorsEPSS 0.2%CVE-2026-15157MEDIUMundici vulnerable to CRLF Injection via blob-like body 'type' propertyEPSS 0.2%CVE-2026-16729MEDIUMundici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fieldsEPSS 0.2%CVE-2026-16728MEDIUMundici vulnerable to downstream response desynchronization via retry interceptorEPSS 0.2%CVE-2026-85008LOWundici vulnerable to caching and replay of unsafe HTTP method responsesEPSS 0.2%