Debian/node-undici: medium 5.3
undici's cache interceptor documents that only safe HTTP methods are cached, but its logic to skip caching is built by subtracting the configured methods from the set of safe methods, so an unsafe met
Action: Upgrade node-undici to 8.10.2+dfsg+~cs3.2.2-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8.10.2+dfsg+~cs3.2.2-1 | - |
Fixed versions
| 8.10.2+dfsg+~cs3.2.2-1 |
Sources
- osv: DEBIAN-CVE-2026-85008#Debian:14/node-undici
- https://security-tracker.debian.org/tracker/CVE-2026-85008
published · modified · JSON