Nodejs Undici vulnerabilities
52 published vulnerabilities in Nodejs Undici. The most were published in 2026 (40), and 40 so far in 2026.
Nodejs Undici vulnerabilities by year
2022
2023
2024
2026
Most exploited Nodejs Undici vulnerabilities
- CVE-2026-109855 undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake
- CVE-2026-109869 undici vulnerable to Denial of Service via unhandled error on excessive content-encodings
- CVE-2026-87018 undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation
- CVE-2026-19534 undici vulnerable to Denial of Service via unrequested WebSocket subprotocol
- CVE-2026-12151 undici WebSocket client vulnerable to denial of service via fragment count bypass
- CVE-2026-6734 undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse
- CVE-2026-9675 undici WebSocket client vulnerable to denial of service via cumulative fragment bypass
- CVE-2026-1526 undici is vulnerable to Unbounded Memory Consumption in undici WebSocket permessage-deflate Decompression
- CVE-2026-1528 undici is vulnerable to Malicious WebSocket 64-bit length overflows undici parser and crashes the client
- CVE-2026-2229 undici is vulnerable to Unhandled Exception in undici WebSocket Client Due to Invalid server_max_window_bits Validation
- CVE-2023-24807 Undici vulnerable to Regular Expression Denial of Service in Headers
- CVE-2026-109383 undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.