nodejs

undici vulnerable to Denial of Service via orphaned RetryHandler response body

undici vulnerable to downstream response splitting via retry interceptor

undici vulnerable to Denial of Service via unrequested WebSocket subprotocol

undici vulnerable to Denial of Service via unbounded decompression of compressed responses

undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches

undici vulnerable to response truncation via oversized chunked responses in the dump interceptor

undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool

undici vulnerable to caching and replay of unsafe HTTP method responses

undici vulnerable to cross-origin cache poisoning via missing origin isolation in interceptors

undici vulnerable to Denial of Service via WebSocketStream unclean close