# cve.now: Undici

The newest entries naming Undici as an affected vendor (up to 200), of 45 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-116630](https://cve.now/CVE-2026-116630.md): undici vulnerable to cross-user information disclosure via cross-origin redirect revalidation (CVSS 5.9)
- [CVE-2026-120415](https://cve.now/CVE-2026-120415.md): undici vulnerable to cross-origin credential disclosure via array-of-tuples headers bypassing redirect stripping (CVSS 5.9)
- [CVE-2026-120423](https://cve.now/CVE-2026-120423.md): undici vulnerable to Subresource Integrity bypass via whitespace in integrity metadata (CVSS 5.9)
- [CVE-2026-116592](https://cve.now/CVE-2026-116592.md): undici vulnerable to cache poisoning and cross-user disclosure via intermediate redirect hops (CVSS 7.4)
- [CVE-2026-120222](https://cve.now/CVE-2026-120222.md): undici vulnerable to Denial of Service via unhandled exception in cache-interceptor response replay (CVSS 5.9)
- [CVE-2026-120474](https://cve.now/CVE-2026-120474.md): undici vulnerable to cross-user cache disclosure via same-origin redirect (CVSS 6.5)
- [CVE-2026-87029](https://cve.now/CVE-2026-87029.md): undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor (CVSS 5.9)
- [CVE-2026-109932](https://cve.now/CVE-2026-109932.md): undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering (CVSS 5.9)
- [CVE-2026-87018](https://cve.now/CVE-2026-87018.md): undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation (CVSS 7.5)
- [CVE-2026-109383](https://cve.now/CVE-2026-109383.md): undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent (CVSS 7.4)
- [CVE-2026-109829](https://cve.now/CVE-2026-109829.md): undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects (CVSS 7.4)
- [CVE-2026-109841](https://cve.now/CVE-2026-109841.md): undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens (CVSS 5.9)
- [CVE-2026-109924](https://cve.now/CVE-2026-109924.md): undici vulnerable to Denial of Service via unbounded memory in the EventSource parser (CVSS 5.9)
- [CVE-2026-109869](https://cve.now/CVE-2026-109869.md): undici vulnerable to Denial of Service via unhandled error on excessive content-encodings (CVSS 7.5)
- [CVE-2026-109855](https://cve.now/CVE-2026-109855.md): undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake (CVSS 7.5)
- [CVE-2026-18149](https://cve.now/CVE-2026-18149.md): undici vulnerable to Denial of Service via orphaned RetryHandler response body (CVSS 5.9)
- [CVE-2026-18540](https://cve.now/CVE-2026-18540.md): undici vulnerable to downstream response splitting via retry interceptor (CVSS 3.7)
- [CVE-2026-19534](https://cve.now/CVE-2026-19534.md): undici vulnerable to Denial of Service via unrequested WebSocket subprotocol (CVSS 7.5)
- [CVE-2026-84890](https://cve.now/CVE-2026-84890.md): undici vulnerable to Denial of Service via unbounded decompression of compressed responses (CVSS 5.9)
- [CVE-2026-84933](https://cve.now/CVE-2026-84933.md): undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches (CVSS 6.5)
- [CVE-2026-84947](https://cve.now/CVE-2026-84947.md): undici vulnerable to response truncation via oversized chunked responses in the dump interceptor (CVSS 3.7)
- [CVE-2026-84961](https://cve.now/CVE-2026-84961.md): undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool (CVSS 7.4)
- [CVE-2026-85008](https://cve.now/CVE-2026-85008.md): undici vulnerable to caching and replay of unsafe HTTP method responses (CVSS 3.7)
- [CVE-2026-85152](https://cve.now/CVE-2026-85152.md): undici vulnerable to cross-origin cache poisoning via missing origin isolation in interceptors (CVSS 7.4)
- [CVE-2026-85014](https://cve.now/CVE-2026-85014.md): undici vulnerable to Denial of Service via WebSocketStream unclean close (CVSS 5.9)
- [CVE-2026-85024](https://cve.now/CVE-2026-85024.md): undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression (CVSS 5.9)
- [CVE-2026-15157](https://cve.now/CVE-2026-15157.md): undici vulnerable to CRLF Injection via blob-like body 'type' property (CVSS 4.2)
- [CVE-2026-14643](https://cve.now/CVE-2026-14643.md): undici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directives (CVSS 5.9)
- [CVE-2026-16728](https://cve.now/CVE-2026-16728.md): undici vulnerable to downstream response desynchronization via retry interceptor (CVSS 4.8)
- [CVE-2026-16729](https://cve.now/CVE-2026-16729.md): undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields (CVSS 4.8)
- [CVE-2026-13697](https://cve.now/CVE-2026-13697.md): undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives (CVSS 7.4)
- [CVE-2026-11525](https://cve.now/CVE-2026-11525.md): undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching (CVSS 3.7)
- [CVE-2026-6733](https://cve.now/CVE-2026-6733.md): undici vulnerable to HTTP response queue poisoning via keep-alive socket reuse (CVSS 3.7)
- [CVE-2026-9678](https://cve.now/CVE-2026-9678.md): undici vulnerable to cross-user information disclosure via shared cache whitespace bypass (CVSS 5.9)
- [CVE-2026-9679](https://cve.now/CVE-2026-9679.md): undici vulnerable to HTTP header injection via Set-Cookie percent-decoding (CVSS 5.9)
- [CVE-2026-9697](https://cve.now/CVE-2026-9697.md): undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent (CVSS 7.4)
- [CVE-2026-6734](https://cve.now/CVE-2026-6734.md): undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse (CVSS 7.5)
- [CVE-2026-9675](https://cve.now/CVE-2026-9675.md): undici WebSocket client vulnerable to denial of service via cumulative fragment bypass (CVSS 7.5)
- [CVE-2026-12151](https://cve.now/CVE-2026-12151.md): undici WebSocket client vulnerable to denial of service via fragment count bypass (CVSS 7.5)
- [CVE-2026-2229](https://cve.now/CVE-2026-2229.md): undici is vulnerable to Unhandled Exception in undici WebSocket Client Due to Invalid server\_max\_window\_bits Validation (CVSS 7.5)
- [CVE-2026-1528](https://cve.now/CVE-2026-1528.md): undici is vulnerable to Malicious WebSocket 64-bit length overflows undici parser and crashes the client (CVSS 7.5)
- [CVE-2026-1527](https://cve.now/CVE-2026-1527.md): undici is vulnerable to CRLF Injection via upgrade option (CVSS 4.6)
- [CVE-2026-2581](https://cve.now/CVE-2026-2581.md): undici is vulnerable to Unbounded Memory Consumption in in Undici's DeduplicationHandler via Response Buffering leads to DoS (CVSS 5.9)
- [CVE-2026-1526](https://cve.now/CVE-2026-1526.md): undici is vulnerable to Unbounded Memory Consumption in undici WebSocket permessage-deflate Decompression (CVSS 7.5)
- [CVE-2026-1525](https://cve.now/CVE-2026-1525.md): undici is vulnerable to Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') (CVSS 6.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/undici
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.