CVE-2026-109829

undici is an HTTP client library for Node.js.

Undici

undici is an HTTP client library for Node.js. In versions 7.0.0 through 7.30.0 and 8.0.0 through 8.12.1, when an originless Agent composes the redirect and cache interceptors in that order with a shared cache store, the cache builds its key from the original request URL before the redirect handler changes the origin, so a response produced after a cross-origin redirect is stored under the original key. An attacker who controls the target of a redirect from a trusted URL can…

15. Okt 2026

Ausgewertete Quellen

• Hersteller
  https://cna.openjsf.org/security-advisories.html
• NVD
  CVE-2026-109829
• GitHub
  https://github.com/nodejs/undici/security/advisories/GHSA-4w7w-5xrc-9h26