Vulnerabilities

TI-2026-74993 CVE-2026-87029 · GHSA-55wc-3pg8-jfw6

Uncaught exception in undici decompress interceptor allows crashes

LOW 32

undici is an HTTP client library for Node.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0026 Published 2026-10-15 Partial fix · 7.30.1, 8.12.2 CWE-248

TI-2026-74888 CVE-2026-109829 · GHSA-4w7w-5xrc-9h26

MEDIUM 40

undici is an HTTP client library for Node.js.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00149 Published 2026-10-15 Partial fix · 7.30.1, 8.12.2 CWE-346

TI-2026-74889 CVE-2026-109841 · GHSA-f72v-6w45-q472

LOW 32

undici is an HTTP client library for Node.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00252 Published 2026-10-15 Partial fix · 7.30.1, 8.12.2 CWE-178