undici is vulnerable to HTTP Request/Response Smuggling
37
CVE Score
Low
HTTP Request/Response Smuggling
The retry interceptor can resume a truncated response and append the resumed bytes onto a body already delivered under the original status and headers. When that response carried a Content-Length, the application receives a longer body than the header describes. A proxy that forwards those status, headers, and body without recalculating framing can emit excess bytes that a downstream peer reads as the next HTTP response. The fix avoids splicing a resumed body onto bytes already delivered under the original headers.
Upgrade the undici library to the patch version.
You are affected if you are using a version that falls within the vulnerable range and you use interceptors.retry().
0.0.1 - 6.28.0
Fixed in 6.28.17.0.0 - 7.29.0
Fixed in 7.29.18.0.0 - 8.10.1
Fixed in 8.10.2undici is vulnerable to HTTP Request/Response Smuggling in versions 0.0.1 - 6.28.0, 7.0.0 - 7.29.0 and 8.0.0 - 8.10.1.
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.