CVE-2023-23936
1 advisory.
npm/undici CVE-2023-23936: medium 4.6
CRLF Injection in Nodejs ‘undici’ via host
Action: Upgrade undici to 5.19.1 or later.
npm i undici@5.19.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 5.19.1 | - |
Fixed versions
| 5.19.1 |
Sources
- osv: GHSA-5r9g-qh6m-jxff
- https://github.com/nodejs/undici/security/advisories/GHSA-5r9g-qh6m-jxff
- https://nvd.nist.gov/vuln/detail/CVE-2023-23936
- https://github.com/nodejs/undici/commit/a2eff05401358f6595138df963837c24348f2034
- https://hackerone.com/reports/1820955
- https://github.com/nodejs/undici
- https://github.com/nodejs/undici/releases/tag/v5.19.1
CVE-2023-23936 · published · modified · JSON