Packages / undici / Security

LowVulnerabilityGHSA-3g92-w8c5-73pqPublished 9 Jul 2024

Undici vulnerable to data leak when using response.arrayBuffer()

Affected · undici

  • >= 6.14.0, < 6.19.2

Fixed in

6.19.2

npm install undici@6.19.2

  1. Not affected

    0.1.0 – 6.13.0

    174 releases

  2. Affected

    6.14.0 – 6.19.1

    11 releases

  3. Fixed

    6.19.2 – 8.12.3

    99 releases, latest

284 stable releases of undici, oldest to newest.

What happens

The full text is not stored yet. Read it on osv.dev.