https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 05 Aug 2026 18:03:39 +0000 https://vulnerability.circl.lu/sighting/cba699f2-5547-45e8-86f9-41f22e8d7e8f/export {"uuid": "cba699f2-5547-45e8-86f9-41f22e8d7e8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15157", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3msaxoacuzt27", "content": "\n\ud83d\udea8 New MEDIUM CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-15157 impacts undici in 2 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/644\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-08-04T12:00:59.048020Z"} {"uuid": "cba699f2-5547-45e8-86f9-41f22e8d7e8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15157", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3msaxoacuzt27", "content": "\n\ud83d\udea8 New MEDIUM CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-15157 impacts undici in 2 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/644\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-08-04T12:00:59.048020Z"} https://vulnerability.circl.lu/sighting/cba699f2-5547-45e8-86f9-41f22e8d7e8f/export Tue, 04 Aug 2026 12:00:59 +0000 https://vulnerability.circl.lu/sighting/4d81b999-4d84-4c96-9b3e-109424774435/export {"uuid": "4d81b999-4d84-4c96-9b3e-109424774435", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15157", "type": "seen", "source": "https://gist.github.com/alon710/3e65ccff71476d14ba3166941f39bd3f", "content": "# CVE-2026-15157: CVE-2026-15157: CRLF Injection in undici HTTP/1.1 Dispatcher\n\n> **CVSS Score:** 4.2\n> **Published:** 2026-08-03\n> **Full Report:** https://cvereports.com/reports/CVE-2026-15157\n\n## Summary\nCVE-2026-15157 details an improper neutralization of CRLF sequences ('CRLF Injection') within undici, a widely used Node.js HTTP/1.1 client. The vulnerability is triggered when processing request bodies that exhibit a duck-typed blob-like interface. When an application accepts untrusted data and assigns it to the .type property of such an object without setting an explicit Content-Type on the request, undici appends the value directly to the outgoing headers array without validating it against control characters. This allows remote attackers to inject carriage return and line feed sequences, culminating in arbitrary header injection, HTTP response splitting, or HTTP request smuggling.\n\n## TL;DR\nA vulnerability in undici allows attackers to inject CRLF sequences via duck-typed blob bodies, leading to HTTP Request Smuggling and Header Injection.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-93\n- **Attack Vector**: Network\n- **CVSS v3.1**: 4.2 (Medium)\n- **EPSS Score**: 0.00142\n- **Impact**: Low Confidentiality, Low Integrity\n- **Exploit Status**: PoC Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- undici HTTP client\n- Node.js applications leveraging undici dispatcher\n- Ecosystem libraries constructing custom duck-typed Blobs\n- **undici**: < 6.28.0 (Fixed in: `6.28.0`)\n- **undici**: >= 7.0.0 < 7.29.0 (Fixed in: `7.29.0`)\n- **undici**: >= 8.0.0 < 8.9.0 (Fixed in: `8.9.0`)\n\n## Mitigation\n\n- Upgrade undici to non-vulnerable versions\n- Enforce explicit Content-Type validation on outgoing requests\n- Sanitize and strip CRLF characters from metadata assigned to duck-typed blobs\n\n**Remediation Steps:**\n1. Analyze the application dependency tree to locate vulnerable undici instances.\n2. Execute 'npm install undici@latest' or pin dependency versions to >=6.28.0, >=7.29.0, or >=8.9.0.\n3. Scan codebases for custom Blob objects containing dynamic properties assigned from user input.\n\n## References\n\n- [GitHub Security Advisory](https://github.com/nodejs/undici/security/advisories/GHSA-m8rv-5g2x-5cg5)\n- [OpenJS Foundation Security Advisories](https://cna.openjsf.org/security-advisories.html)\n- [NVD CVE-2026-15157 Record](https://nvd.nist.gov/vuln/detail/CVE-2026-15157)\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-15157)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-15157) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-04T11:32:23.896142Z"} {"uuid": "4d81b999-4d84-4c96-9b3e-109424774435", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15157", "type": "seen", "source": "https://gist.github.com/alon710/3e65ccff71476d14ba3166941f39bd3f", "content": "# CVE-2026-15157: CVE-2026-15157: CRLF Injection in undici HTTP/1.1 Dispatcher\n\n> **CVSS Score:** 4.2\n> **Published:** 2026-08-03\n> **Full Report:** https://cvereports.com/reports/CVE-2026-15157\n\n## Summary\nCVE-2026-15157 details an improper neutralization of CRLF sequences ('CRLF Injection') within undici, a widely used Node.js HTTP/1.1 client. The vulnerability is triggered when processing request bodies that exhibit a duck-typed blob-like interface. When an application accepts untrusted data and assigns it to the .type property of such an object without setting an explicit Content-Type on the request, undici appends the value directly to the outgoing headers array without validating it against control characters. This allows remote attackers to inject carriage return and line feed sequences, culminating in arbitrary header injection, HTTP response splitting, or HTTP request smuggling.\n\n## TL;DR\nA vulnerability in undici allows attackers to inject CRLF sequences via duck-typed blob bodies, leading to HTTP Request Smuggling and Header Injection.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-93\n- **Attack Vector**: Network\n- **CVSS v3.1**: 4.2 (Medium)\n- **EPSS Score**: 0.00142\n- **Impact**: Low Confidentiality, Low Integrity\n- **Exploit Status**: PoC Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- undici HTTP client\n- Node.js applications leveraging undici dispatcher\n- Ecosystem libraries constructing custom duck-typed Blobs\n- **undici**: < 6.28.0 (Fixed in: `6.28.0`)\n- **undici**: >= 7.0.0 < 7.29.0 (Fixed in: `7.29.0`)\n- **undici**: >= 8.0.0 < 8.9.0 (Fixed in: `8.9.0`)\n\n## Mitigation\n\n- Upgrade undici to non-vulnerable versions\n- Enforce explicit Content-Type validation on outgoing requests\n- Sanitize and strip CRLF characters from metadata assigned to duck-typed blobs\n\n**Remediation Steps:**\n1. Analyze the application dependency tree to locate vulnerable undici instances.\n2. Execute 'npm install undici@latest' or pin dependency versions to >=6.28.0, >=7.29.0, or >=8.9.0.\n3. Scan codebases for custom Blob objects containing dynamic properties assigned from user input.\n\n## References\n\n- [GitHub Security Advisory](https://github.com/nodejs/undici/security/advisories/GHSA-m8rv-5g2x-5cg5)\n- [OpenJS Foundation Security Advisories](https://cna.openjsf.org/security-advisories.html)\n- [NVD CVE-2026-15157 Record](https://nvd.nist.gov/vuln/detail/CVE-2026-15157)\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-15157)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-15157) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-04T11:32:23.896142Z"} https://vulnerability.circl.lu/sighting/4d81b999-4d84-4c96-9b3e-109424774435/export Tue, 04 Aug 2026 11:32:23 +0000 https://vulnerability.circl.lu/sighting/d9a08af9-543c-4195-bccc-127855f50427/export {"uuid": "d9a08af9-543c-4195-bccc-127855f50427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15157", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mrsu5wdpic2c", "content": "\ud83d\udea8 Medium-severity security fix in undici@6.28.0, 7.29.0, and 8.9.0 just released!\n\nPatches CVE-2026-15157: CRLF injection via a blob-like body type property\n\ngithub.com/nodejs/undic...", "creation_timestamp": "2026-07-29T21:20:54.112047Z"} {"uuid": "d9a08af9-543c-4195-bccc-127855f50427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15157", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mrsu5wdpic2c", "content": "\ud83d\udea8 Medium-severity security fix in undici@6.28.0, 7.29.0, and 8.9.0 just released!\n\nPatches CVE-2026-15157: CRLF injection via a blob-like body type property\n\ngithub.com/nodejs/undic...", "creation_timestamp": "2026-07-29T21:20:54.112047Z"} https://vulnerability.circl.lu/sighting/d9a08af9-543c-4195-bccc-127855f50427/export Wed, 29 Jul 2026 21:20:54 +0000