Packages / undici / Security

ModerateVulnerabilityGHSA-8qr4-xgw6-wmr3Published 18 Aug 2022

`undici.request` vulnerable to SSRF using absolute URL on `pathname`

Affected · undici

  • < 5.8.2

Fixed in

5.8.2

npm install undici@5.8.2

  1. Affected

    0.1.0 – 5.8.1

    106 releases

  2. Fixed

    5.8.2 – 8.12.3

    178 releases, latest

284 stable releases of undici, oldest to newest.

What happens

The full text is not stored yet. Read it on osv.dev.