Medium
CVE-2026-1525
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 68
Reset filters
Medium
CVE-2026-22036
Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion
Medium
CVE-2025-69206
hemmelig allows SSRF Filter bypass via Secret Request functionality
Critical
CVE-2025-7783
form-data uses unsafe random function in form-data for choosing boundary
Low
CVE-2025-47279
undici Denial of Service attack via bad certificate data
Medium
CVE-2025-22150
Use of Insufficiently Random Values in undici
Low
CVE-2024-38372
Undici vulnerable to data leak when using response.arrayBuffer()
Low
CVE-2024-30261
Undici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect
Low
CVE-2024-30260
Undici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline
Low
CVE-2024-24758
Undici proxy-authorization header not cleared on cross-origin redirect in fetch
Medium
CVE-2024-24750
fetch(url) leads to a memory leak in undici
High
CVE-2024-23641
Sending a GET or HEAD request with a body crashes SvelteKit
Low
CVE-2023-45143
Undici's cookie header not cleared on cross-origin redirect in fetch
Medium
CVE-2023-23936
CRLF Injection in Nodejs ‘undici’ via host
High
CVE-2023-24807
Regular Expression Denial of Service in Headers
Medium
CVE-2022-35948
Nodejs ‘undici’ vulnerable to CRLF Injection via Content-Type
Medium
CVE-2022-35949
`undici.request` vulnerable to SSRF using absolute URL on `pathname`
Low
CVE-2022-31151
undici before v5.8.0 vulnerable to uncleared cookies on cross-host / cross-origin redirect
Medium
CVE-2022-31150
undici before v5.8.0 vulnerable to CRLF injection in request headers
High
CVE-2022-32210
ProxyAgent vulnerable to MITM
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.