Undici vulnerable to data leak when using response.arrayBuffer()

概要

参考情報

• nodejs/undici security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2024-38372 · ADVISORY
• nodejs/undici · WEB
• nodejs/undici · WEB
• nodejs/undici#3338 · WEB
• nodejs/undici commit f979ec3 · WEB
• nodejs/undici · PACKAGE
• security.netapp.com/advisory/ntap-20240828-0009

undici のその他の脆弱性

• CVE-2026-87029高 7.5undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its decompress interceptor forward…
• CVE-2026-87018高 7.5undici is an HTTP client library for Node.js. In versions 4.2.1 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, the client p…
• CVE-2026-109932高 7.5undici is an HTTP client library for Node.js. In versions 5.15.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its WebSock…
• CVE-2026-109924高 7.5undici is an HTTP client library for Node.js. In versions 6.5.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its EventSou…
• CVE-2026-109869高 7.5undici is an HTTP client library for Node.js. In versions 6.23.0 through 6.29.0, 7.18.0 through 7.30.0, and 8.0.0 through 8.12.1, its fetch(…