Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-14643 |
|
Vulnerability in undici (CVE-2026-14643)
vulnerability in undici (CVE-2026-14643). Confidential information can be exposed externally. Exploitable via ``private``. Mitigation: upgrade to `8.9.0` or later.
|
| CVE-2026-15157 |
|
Vulnerability in undici (CVE-2026-15157)
vulnerability in undici (CVE-2026-15157). Risk of unauthorized operations or information disclosure. Exploitable via ``body.type``. Mitigation: upgrade to `6.24.0` or later.
|
| CVE-2026-16728 |
|
Vulnerability in undici (CVE-2026-16728)
vulnerability in undici (CVE-2026-16728). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.9.0` or later.
|
| CVE-2026-16729 |
|
Vulnerability in undici (CVE-2026-16729)
vulnerability in undici (CVE-2026-16729). Risk of unauthorized operations or information disclosure. Exploitable via ``setCookie``. Mitigation: upgrade to `8.9.0` or later.
|
| CVE-2026-13697 |
|
Information Disclosure in undici (CVE-2026-13697)
vulnerability in undici (CVE-2026-13697). Confidential information can be exposed externally. Exploitable via ``private``. Mitigation: upgrade to `8.9.0` or later.
|
| CVE-2026-9678 |
|
Vulnerability in undici (CVE-2026-9678)
vulnerability in undici (CVE-2026-9678). Confidential information can be exposed externally. Exploitable via ``private``. Mitigation: upgrade to `8.5.0` or later.
|
| CVE-2026-9679 |
|
Vulnerability in undici (CVE-2026-9679)
vulnerability in undici (CVE-2026-9679). Data can be tampered with by attackers. Exploitable via ``parseSetCookie``. Mitigation: upgrade to `8.5.0` or later.
|
| CVE-2026-9697 |
|
Vulnerability in undici (CVE-2026-9697)
vulnerability in undici (CVE-2026-9697). Confidential information can be exposed externally. Exploitable via ``ProxyAgent``. Mitigation: upgrade to `8.5.0` or later.
|
| CVE-2026-6733 |
|
Vulnerability in undici (CVE-2026-6733)
vulnerability in undici (CVE-2026-6733). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.5.0` or later.
|
| CVE-2026-6734 |
|
Vulnerability in undici (CVE-2026-6734)
vulnerability in undici (CVE-2026-6734). Successful exploitation can lead to full system takeover. Exploitable via ``Socks5ProxyAgent``. Mitigation: upgrade to `8.2.0` or later.
|
| CVE-2026-11525 |
|
Vulnerability in undici (CVE-2026-11525)
vulnerability in undici (CVE-2026-11525). Risk of unauthorized operations or information disclosure. Exploitable via ``SameSite``. Mitigation: upgrade to `8.5.0` or later.
|
| CVE-2026-9675 |
|
Vulnerability in undici (CVE-2026-9675)
vulnerability in undici (CVE-2026-9675). Risk of unauthorized operations or information disclosure. Exploitable via ``maxPayloadSize``. Mitigation: upgrade to `8.5.0` or later.
|
| CVE-2026-12151 |
|
Vulnerability in undici (CVE-2026-12151)
vulnerability in undici (CVE-2026-12151). Risk of unauthorized operations or information disclosure. Exploitable via ``maxPayloadSize``. Mitigation: upgrade to `8.5.0` or later.
|
| CVE-2026-1528 |
|
Vulnerability in nodejs (CVE-2026-1528)
vulnerability in nodejs (CVE-2026-1528). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2229 |
|
Vulnerability in c (CVE-2026-2229)
vulnerability in c (CVE-2026-2229). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-1526 |
|
Vulnerability in nodejs (CVE-2026-1526)
vulnerability in nodejs (CVE-2026-1526). Risk of unauthorized operations or information disclosure.
|