mcollina

undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression

undici vulnerable to Denial of Service via WebSocketStream unclean close

undici vulnerable to cross-origin cache poisoning via missing origin isolation in interceptors

undici vulnerable to caching and replay of unsafe HTTP method responses

undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool

undici vulnerable to response truncation via oversized chunked responses in the dump interceptor

undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches

undici vulnerable to Denial of Service via unbounded decompression of compressed responses

undici vulnerable to Denial of Service via unrequested WebSocket subprotocol

undici vulnerable to downstream response splitting via retry interceptor