Aller au contenu
en Se connecter
6.5 Moyenne

CVE-2024-24750 Undici is an HTTP/1.1 client, written from scratch for Node.js

Description

Undici is an HTTP/1.1 client, written from scratch for Node.js. In affected versions calling `fetch(url)` and not consuming the incoming body ((or consuming it very slowing) will lead to a memory leak. This issue has been addressed in version 6.6.1. Users are advised to upgrade. Users unable to upgrade should make sure to always consume the incoming body.

Produits et versions touchés

Produit Versions touchées Corrigé en
undici 6.0 6.0.0 → < 6.6.1 6.6.1

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de undici

Les 15 CVE de undici →
CVE-2026-22036 Undici is an HTTP/1.1 client for Node.js 5.9 Moyenne CVE-2025-47279 Undici is an HTTP/1.1 client for Node.js 3.1 Faible CVE-2025-22150 Undici is an HTTP/1.1 client 6.8 Moyenne CVE-2024-38372 Undici is an HTTP/1.1 client, written from scratch for Node.js 2.0 Faible
Suivre cette CVE