NodeJS undici

• CVE-2026-22036 Medium 5.9 Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion 0.5%
• CVE-2025-47279 Low 3.1 undici Denial of Service attack via bad certificate data 0.3%
• CVE-2025-22150 Medium 6.8 Undici Uses Insufficiently Random Values 0.8%
• CVE-2024-38372 Low 2.0 Undici vulnerable to data leak when using response.arrayBuffer() 0.5%
• CVE-2024-30260 Low 3.9 Undici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline 0.7%
• CVE-2024-30261 Low 2.6 Undici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect 0.8%
• CVE-2024-24750 Medium 6.5 Backpressure request ignored in fetch() in Undici 0.7%
• CVE-2024-24758 Low 3.9 Proxy-Authorization header not cleared on cross-origin redirect in fetch in Undici 0.8%
• CVE-2023-45143 Low 3.9 Undici's cookie header not cleared on cross-origin redirect in fetch 1.4%
• CVE-2023-23936 Medium 6.5 CRLF Injection in Nodejs ‘undici’ via host 1.1%
• CVE-2023-24807 High 7.5 Undici vulnerable to Regular Expression Denial of Service in Headers 1.3%
• CVE-2022-35948 Medium 5.3 CRLF Injection in Nodejs ‘undici’ via Content-Type 1.4%
• CVE-2022-35949 Medium 5.3 `undici.request` vulnerable to SSRF using absolute URL on `pathname` 1.9%
• CVE-2022-31151 Low 3.7 Uncleared cookies on cross-host/cross-origin redirect in undici 0.7%
• CVE-2022-31150 Medium 5.3 CRLF injection in request headers 1.5%