UlisesGascon

webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header

@fastify/middie vulnerable to authorization bypass via encoded slash in path parameter values

@fastify/middie standalone engine vulnerable to Denial of Service via malformed percent-encoded paths

@fastify/express vulnerable to middleware bypass via non-string mount paths in prefixed plugins

undici vulnerable to HTTP header injection via Set-Cookie percent-decoding

undici vulnerable to HTTP response queue poisoning via keep-alive socket reuse

undici vulnerable to cross-user information disclosure via shared cache whitespace bypass

undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching

undici WebSocket client vulnerable to denial of service via cumulative fragment bypass

webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies