undici is vulnerable to HTTP Request/Response Smuggling
37
Low Risk
The retry interceptor can resume a truncated response and append the resumed bytes onto a body already delivered under the original status and headers. When that response carried a Content-Length, the application receives a longer body than the header describes. A proxy that forwards those status, headers, and body without recalculating framing can emit excess bytes that a downstream peer reads as the next HTTP response. The fix avoids splicing a resumed body onto bytes already delivered under the original headers.
You are affected if you are using a version that falls within the vulnerable range and you use interceptors.retry().
undici is vulnerable to HTTP Request/Response Smuggling in versions 0.0.1 - 6.28.0, 7.0.0 - 7.29.0 and 8.0.0 - 8.10.1.
Upgrade the undici library to the patch version.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.