Skip to content

Vulnerabilities of NodeJS undici

Is your version affected?

CVE Summary Score Published
CVE-2026-22036 Undici is an HTTP/1.1 client for Node.js 5.9 Medium Jan 14, 2026
CVE-2025-47279 Undici is an HTTP/1.1 client for Node.js 3.1 Low May 15, 2025
CVE-2025-22150 Undici is an HTTP/1.1 client 6.8 Medium Jan 21, 2025
CVE-2024-38372 Undici is an HTTP/1.1 client, written from scratch for Node.js 2.0 Low Jul 8, 2024
CVE-2024-30260 Undici is an HTTP/1.1 client, written from scratch for Node.js 3.9 Low Apr 4, 2024
CVE-2024-30261 Undici is an HTTP/1.1 client, written from scratch for Node.js 2.6 Low Apr 4, 2024
CVE-2024-24750 Undici is an HTTP/1.1 client, written from scratch for Node.js 6.5 Medium Feb 16, 2024
CVE-2024-24758 Undici is an HTTP/1.1 client, written from scratch for Node.js 3.9 Low Feb 16, 2024
CVE-2023-45143 Undici is an HTTP/1.1 client written from scratch for Node.js 3.9 Low Oct 12, 2023
CVE-2023-23936 Undici is an HTTP/1.1 client for Node.js 6.5 Medium Feb 16, 2023
CVE-2023-24807 Undici is an HTTP/1.1 client for Node.js 7.5 High Feb 16, 2023
CVE-2022-35948 undici is an HTTP/1.1 client, written from scratch for Node.js.`=< undici@5.8.0` users are vulnerable to _CRLF… 5.3 Medium Aug 13, 2022
CVE-2022-35949 undici is an HTTP/1.1 client, written from scratch for Node.js.`undici` is vulnerable to SSRF (Server-side Request… 5.3 Medium Aug 12, 2022
CVE-2022-31151 Authorization headers are cleared on cross-origin redirect 3.7 Low Jul 20, 2022
CVE-2022-31150 undici is an HTTP/1.1 client, written from scratch for Node.js 5.3 Medium Jul 19, 2022

Other NodeJS products