Nodejs

A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries.

A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) cli

A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside

undici does not validate the type property of a duck-typed blob-like request body before using it as the Content-Type he

undici's cache interceptor mishandles optional whitespace placed around the equals sign of a qualified no-cache or priva

undici's retry interceptor can deliver a response whose body length does not match the Content-Length header exposed to

undici's setCookie function does not fully sanitize cookie attributes. In undici before 6.28.0, from 7.0.0 up to before

undici's cache interceptor mishandles malformed Cache-Control private directives. In undici 7.0.0 up to before 7.29.0 an

A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the `--

A flaw in Node.js Permission API can cause a file metadata to be modified even on a path that was set as read-only with

A flaw in Node.js TLS host verification can cause an attacker to bypass certification validation. This vulnerability

A flaw in Node.js WebCrypto implementation can crash the process if the input of `subtle.encrypt()` is a multiple of 2Gi

A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c

A inconsistency in Node.js hostname matching can cause a trust-policy bypass in multi-context mTLS setups. This vulne

A flaw in Node.js HTTP/2 client allows a server to send an unlimited number of ORIGIN frames, which could lead to an Out

A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling can lead to tls wildcard-depth

A flaw in Node.js proxy tunnel error handling could expose proxy credentials in `ERR_PROXY_TUNNEL` error messages. Wh

A flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before the client has sent th

A flaw in Node.js HTTP/2 server API can cause servers to keep accepting data even after sending a `GOAWAY` frame. This v

A flaw in Node.js Permission Model enforcement allows Bypass via `process.report.writeReport()` Path Misvalidation. This

Impact: undici's ProxyAgent silently drops the requestTls option when configured with a SOCKS5 proxy URI (socks5:// or s

Impact: undici's cookie parser in parseSetCookie percent-decodes cookie values via qsUnescape, turning encoded sequences

Impact: Undici's cache interceptor incorrectly classifies some responses as cacheable when the upstream Cache-Control he

Impact: When using Socks5ProxyAgent, undici reuses a single connection pool across different origins without verifying t

Impact: Undici's HTTP/1.1 client is vulnerable to response queue poisoning on reused keep-alive sockets. An attacker-con

Impact: When undici parses a Set-Cookie header, it accepts any SameSite attribute value that contains Strict, Lax, or No

Impact: The undici WebSocket client enforces maxPayloadSize per-frame but does not enforce the cumulative size of fragme

Impact: The undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but d

A flaw in V8's string hashing mechanism causes integer-like strings to be hashed to their numeric value, making hash col

An incomplete fix for CVE-2024-36137 leaves `FileHandle.chmod()` and `FileHandle.chown()` in the promises API without th

A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync.native()` without the required read pe

A memory leak occurs in Node.js HTTP/2 servers when a client sends WINDOW_UPDATE frames on stream 0 (connection-level) t

A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potent

A flaw in Node.js Permission Model network enforcement leaves Unix Domain Socket (UDS) server operations without the req

A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received with a header named `_

A flaw in Node.js URL processing causes an assertion failure in native code when `url.format()` is called with a malform

This is an uncontrolled resource consumption vulnerability (CWE-400) that can lead to Denial of Service (DoS). In vulne

ImpactThe undici WebSocket client is vulnerable to a denial-of-service attack due to improper validation of the server_m

ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length. undici's Byt

ImpactWhen an application passes user-controlled input to the upgrade option of client.request(), an attacker can inject

The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during permessa

Undici allows duplicate HTTP Content-Length headers when they are provided in an array with case-variant names (e.g., Co

A flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a TLS server when `pskCall

A flaw in Node.js's permission model allows Unix Domain Socket (UDS) connections to bypass network restrictions when `--

We have identified a bug in Node.js error handling where "Maximum call stack size exceeded" errors become uncatchable wh

A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unha

A memory leak in Node.js’s OpenSSL integration occurs when converting `X.509` certificate fields to UTF-8 without freein

A flaw in Node.js's permission model allows a file's access and modification timestamps to be changed via `futimes()` ev

A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions u

Undici is an HTTP/1.1 client for Node.js. Prior to 7.18.0 and 6.23.0, the number of links in the decompression chain is