Vulnerabilities in undici
45 resultsCVE-2026-116592HIGHundici vulnerable to cache poisoning and cross-user disclosure via intermediate redirect hopsEPSS 0.2%CVE-2026-109829HIGHundici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirectsEPSS 0.1%CVE-2026-116630MEDIUMundici vulnerable to cross-user information disclosure via cross-origin redirect revalidationEPSS 0.1%CVE-2026-120423MEDIUMundici vulnerable to Subresource Integrity bypass via whitespace in integrity metadataEPSS 0.1%CVE-2026-85008LOWundici vulnerable to caching and replay of unsafe HTTP method responsesEPSS 0.1%