Vulnerabilities

TI-2026-85814 CVE-2026-116630

undici information disclosure via cross-origin redirect revalidation

LOW 25

undici is an HTTP client for Node.js.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00148 Published 2026-11-06 Fixed in 7.30.2, 8.12.4 CWE-346

TI-2026-85809 CVE-2026-120415

LOW 26

undici is an HTTP client for Node.js.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.003 Published 2026-11-06 Fixed in 7.30.2, 8.12.4 CWE-200

TI-2026-85810 CVE-2026-120423

LOW 25

undici is an HTTP client for Node.js.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00134 Published 2026-11-06 Fixed in 7.30.2, 8.12.4 CWE-354

TI-2026-85807 CVE-2026-116592

LOW 32

undici is an HTTP client for Node.js.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00157 Published 2026-11-06 Fixed in 7.30.2, 8.12.4 CWE-346

TI-2026-85808 CVE-2026-120222

LOW 26

undici is an HTTP client for Node.js.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00308 Published 2026-11-06 Fixed in 7.30.2, 8.12.4 CWE-248

TI-2026-85805 CVE-2026-120474

LOW 29

undici is an HTTP client for Node.js.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00288 Published 2026-11-06 Fixed in 7.30.2, 8.12.4 CWE-524