CVE-2023-24807
1 advisory.
npm/undici CVE-2023-24807: high 7.5
Regular Expression Denial of Service in Headers
Action: Upgrade undici to 5.19.1 or later.
npm i undici@5.19.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.19.1 | - |
Fixed versions
| 5.19.1 |
Sources
- osv: GHSA-r6ch-mqf9-qc9w
- https://github.com/nodejs/undici/security/advisories/GHSA-r6ch-mqf9-qc9w
- https://nvd.nist.gov/vuln/detail/CVE-2023-24807
- https://github.com/nodejs/undici/commit/f2324e549943f0b0937b09fb1c0c16cc7c93abdf
- https://github.com/nodejs/undici
- https://github.com/nodejs/undici/releases/tag/v5.19.1
- https://hackerone.com/bugs?report_id=1784449
CVE-2023-24807 · published · modified · JSON