Aller au contenu
en Se connecter
2.6 Faible

CVE-2024-30261 Undici is an HTTP/1.1 client, written from scratch for Node.js

Description

Undici is an HTTP/1.1 client, written from scratch for Node.js. An attacker can alter the `integrity` option passed to `fetch()`, allowing `fetch()` to accept requests as valid even if they have been tampered. This vulnerability was patched in version(s) 5.28.4 and 6.11.1.

Produits et versions touchés

Produit Versions touchées Corrigé en
undici 6.0 6.0.0 → < 6.11.1 6.11.1
undici 5.28 premières → < 5.28.4 5.28.4

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de undici

Les 15 CVE de undici →
CVE-2026-22036 Undici is an HTTP/1.1 client for Node.js 5.9 Moyenne CVE-2025-47279 Undici is an HTTP/1.1 client for Node.js 3.1 Faible CVE-2025-22150 Undici is an HTTP/1.1 client 6.8 Moyenne CVE-2024-38372 Undici is an HTTP/1.1 client, written from scratch for Node.js 2.0 Faible
Suivre cette CVE