Packages / undici / Security

LowVulnerabilityGHSA-3787-6prv-h9w3Published 16 Feb 2024

Undici proxy-authorization header not cleared on cross-origin redirect in fetch

Affected · undici

  • < 5.28.3
  • >= 6.0.0, < 6.6.1

Fixed in

6.6.1

npm install undici@6.6.1

  1. Affected

    0.1.0 – 5.28.2

    148 releases

  2. Fixed

    5.28.3 – 5.29.0

    4 releases

  3. Affected

    6.0.0 – 6.6.0

    9 releases

  4. Fixed

    6.6.1 – 8.12.3

    123 releases, latest

284 stable releases of undici, oldest to newest.

What happens

The full text is not stored yet. Read it on osv.dev.