CVE-2022-31150
1 advisory.
npm/undici CVE-2022-31150: medium 5.3, EPSS 1.52%
undici before v5.8.0 vulnerable to CRLF injection in request headers
Action: Upgrade undici to 5.8.0 or later.
npm i undici@5.8.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.8.0 | - |
Fixed versions
| 5.8.0 |
Sources
- osv: GHSA-3cvr-822r-rqcc
- https://github.com/nodejs/undici/security/advisories/GHSA-3cvr-822r-rqcc
- https://nvd.nist.gov/vuln/detail/CVE-2022-31150
- https://github.com/nodejs/undici/commit/a29a151d0140d095742d21a004023d024fe93259
- https://hackerone.com/reports/409943
- https://github.com/nodejs/undici
- https://github.com/nodejs/undici/releases/tag/v5.8.0
- https://security.netapp.com/advisory/ntap-20220915-0002
CVE-2022-31150 · published · modified · JSON