Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2024-30260

Undici is an HTTP/1.1 client, written from scratch for Node.js. Undici cleared Authorization and Proxy-Authorization headers for fetch(), but did not clear them for undici.request(). This vulnerability was patched in version(s) 5.28.4 and 6.11.1.

CVSS v3:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L

CWEs:

OWASP TOP 10:

Software From Fixed in
undici - 5.28.4
undici 6.0.0 6.11.1
nodejs / undici - 5.28.4
nodejs / undici 6.0.0 6.11.1
fedoraproject / fedora 38 38.x
fedoraproject / fedora 39 39.x
fedoraproject / fedora 40 40.x