Known vulnerabilities in undici - page 2

Vendor: Node.js
Software: undici
Software CPE: cpe:2.3:a:nodejs:undici:*:*:*:*:*:nodejs:*:*
Total vulnerabilities: 27
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting undici undici is affected by 27 known vulnerabilities: 20 medium, 7 low Critical High Medium Low

Vulnerabilities (27)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82066 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45143
CWE-200 Medium
No
No
5.26.2 17.10.2023 SB2023101702
SB2023101703
SB2023101801
and 31 more
#VU72404 - Incorrect Regular Expression
CVE-2023-24807
CWE-185 Medium
No
No
5.19.1 20.02.2023 SB2023022022
SB2023022020
SB2023030129
and 34 more
#VU72403 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-23936
CWE-113 Medium
No
No
5.19.1 20.02.2023 SB2023022022
SB2023022020
SB2023030129
and 35 more
#VU67166 - Server-Side Request Forgery (SSRF)
CVE-2022-35949
CWE-918 Medium
No
No
5.8.2 11.09.2022 SB2022091109
SB2022091110
SB2022091217
and 4 more
#VU67165 - Exposure of resource to wrong sphere
CVE-2022-31151
CWE-668 Low
No
No
5.8.0 11.09.2022 SB2022091108
SB2022092664
#VU67164 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-35948
CWE-93 Medium
No
No
5.8.2 11.09.2022 SB2022091109
SB2022091110
SB2022091217
and 4 more
#VU67163 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-31150
CWE-93 Medium
No
No
5.8.0 11.09.2022 SB2022091108
SB2022091110
SB2022091217
and 2 more


Showing elements 21 - 40 out of 27