Undici: Malicious WebSocket 64-bit length overflows parser and crashes the client

高 7.5CVE-2026-1528 · GHSA-f269-vfmq-vjvj · 12/03/2026 公開 · 04/09/2026 更新

パッケージ	影響を受けるバージョン	修正済みバージョン
undici nodejs	`≥ 7.0.0, < 7.24.0< 6.24.0`	`7.24.06.24.0`
undici npm	`≥ 6.0.0, < 6.24.0≥ 7.0.0, < 7.24.0`	`6.24.07.24.0`

概要

Impact

A server can reply with a WebSocket frame using the 64-bit length form and an extremely large length. undici's ByteParser overflows internal math, ends up in an invalid state, and throws a fatal TypeError that terminates the process.

Patches

Patched in the undici version v7.24.0 and v6.24.0. Users should upgrade to this version or later.

Workarounds

There are no workarounds.

NVD の説明

ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length. undici's ByteParser overflows internal math, ends up in an invalid state, and throws a fatal TypeError that terminates the process. Patches Patched in the undici version v7.24.0 and v6.24.0. Users should upgrade to this version or later.

参考情報

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン