Packages / undici / Security

ModerateVulnerabilityGHSA-5r9g-qh6m-jxffPublished 16 Feb 2023

CRLF Injection in Nodejs ‘undici’ via host

Affected · undici

  • >= 2.0.0, < 5.19.1

Fixed in

5.19.1

npm install undici@5.19.1

  1. Not affected

    0.1.0 – 1.3.1

    22 releases

  2. Affected

    2.0.0 – 5.19.0

    100 releases

  3. Fixed

    5.19.1 – 8.12.3

    162 releases, latest

284 stable releases of undici, oldest to newest.

What happens

The full text is not stored yet. Read it on osv.dev.