Aller au contenu
en Se connecter
3.9 Faible

CVE-2024-24758 Undici is an HTTP/1.1 client, written from scratch for Node.js

Description

Undici is an HTTP/1.1 client, written from scratch for Node.js. Undici already cleared Authorization headers on cross-origin redirects, but did not clear `Proxy-Authentication` headers. This issue has been patched in versions 5.28.3 and 6.6.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Produits et versions touchés

Produit Versions touchées Corrigé en
undici 6.0 6.0.0 → < 6.6.1 6.6.1
undici 5.28 premières → < 5.28.3 5.28.3

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de undici

Les 15 CVE de undici →
CVE-2026-22036 Undici is an HTTP/1.1 client for Node.js 5.9 Moyenne CVE-2025-47279 Undici is an HTTP/1.1 client for Node.js 3.1 Faible CVE-2025-22150 Undici is an HTTP/1.1 client 6.8 Moyenne CVE-2024-38372 Undici is an HTTP/1.1 client, written from scratch for Node.js 2.0 Faible
Suivre cette CVE