CVE-2024-30261
Published
CVSS v3
2.6
LOW
CVSS v2
N/A
Affected
1
PROJECT
Description
Undici is an HTTP/1.1 client, written from scratch for Node.js. An attacker can alter the `integrity` option passed to `fetch()`, allowing `fetch()` to accept requests as valid even if they have been tampered. This vulnerability was patched in version(s) 5.28.4 and 6.11.1.
GitHub