UlisesGascon

undici vulnerable to response truncation via oversized chunked responses in the dump interceptor

undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches

undici vulnerable to Denial of Service via unbounded decompression of compressed responses

undici vulnerable to Denial of Service via unrequested WebSocket subprotocol

undici vulnerable to downstream response splitting via retry interceptor

undici vulnerable to Denial of Service via orphaned RetryHandler response body

fastify vulnerable to request body replacement via an async validation result collision

fastify vulnerable to authentication bypass via malformed URLs reaching encapsulated not-found handlers

fastify vulnerable to header validation bypass via incomplete schema case normalization

fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority