Ulises Gascón on Mythryl: “🚨 undici just shipped a coordinated security release fixing 8 CVEs…”

🚨 undici just shipped a coordinated security release fixing 8 CVEs (4 high, 4 medium) across the 6.x, 7.x, and 8.x lines: process-crash DoS, TLS certificate validation bypass, Subresource Integrity bypass, and cache poisoning. Upgrade to 6.29.1, 7.30.1, or 8.12.2. github.com/nodejs/undic...

github.comRelease v8.12.2 · nodejs/undiciSecurity fixes High severity Denial of service via TLS 1.2 certificate-changing renegotiation CVE-2026-87018 · GHSA-qrxm-fqhp-jwvm A malicious or compromised HTTPS server could crash the Node.js pr...

15/10/26, 6:52 pm0 reposts0 likes

Post