Packages / undici / Security

ModerateVulnerabilityGHSA-3cvr-822r-rqccPublished 21 Jul 2022

undici before v5.8.0 vulnerable to CRLF injection in request headers

Affected · undici

  • < 5.8.0

Fixed in

5.8.0

npm install undici@5.8.0

  1. Affected

    0.1.0 – 5.7.0

    104 releases

  2. Fixed

    5.8.0 – 8.12.3

    180 releases, latest

284 stable releases of undici, oldest to newest.

What happens

The full text is not stored yet. Read it on osv.dev.