A flaw was found in undici. An attacker-controlled upstream server can exploit a vulnerability in Undici's HTTP/1.1 client, specifically related to response queue poisoning on reused keep-alive sockets. This allows the attacker to inject a…

▾ SunlitRed Hat · Red Hat Enterprise Linux AppStream (v. 8)EPSS 0.22%via CSAF

CVE-2026-6734High· 7.5

4mo ago

undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing (CVE-2026-6734)

A flaw was found in undici. When using Socks5ProxyAgent, undici incorrectly reuses a single connection pool across different origins. This can lead to cross-origin request routing, where sensitive credentials and data intended for one dest…

▾ TwilightRed Hat · Red Hat Openshift Data Foundation 4.20EPSS 0.34%via CSAF

CVE-2026-9679Medium· 5.9

4mo ago

undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding (CVE-2026-9679)

A flaw was found in undici. The cookie parser in the `parseSetCookie` function incorrectly decodes cookie values, which is contrary to standard specifications. This vulnerability allows an attacker-controlled upstream to inject arbitrary H…

▾ SunlitRed Hat · Red Hat Openshift Data Foundation 4.18EPSS 0.26%via CSAF

Tagged “npm”

OpenClaw: Skill-command dispatch could skip before-tool-call hooks

OpenClaw: Zalo allowFrom could bind to mutable display names

OpenClaw: Config recovery could restore openclaw.json with broad file permissions

OpenClaw: memory-wiki shared search could miss session visibility checks

OpenClaw: BlueBubbles sender policy could match mutable conversation identifiers

OpenClaw: Linux and macOS exec allowlists skipped configured argument patterns

OpenClaw: Workspace .env npm_execpath could influence bundled runtime dependency install

OpenClaw: Focus command could miss controlScope enforcement

OpenClaw: Workspace .env STATE_DIRECTORY could influence bundled runtime dependency roots

OpenClaw: Discord allowFrom could bind to mutable display names

OpenClaw: Workspace-derived service PATH could influence trash command selection

OpenClaw: Empty-scope device re-pairing could confuse caller scope containment

OpenClaw: Internal/webchat command auth could inherit ownerAllowFrom wildcard state

gemini-mcp-tool vulnerable to OS command injection and @file exfiltration via prompt quoting (CVE-2026-0755)

Pi Agent: Race condition in Pi auth.json writes could expose stored credentials

Pi Agent: Predictable temporary extension install paths allow local privilege escalation on shared Linux hosts

Pi Agent: Pi loads project-local extensions without approval

n8n: Wrong OAuth Scope on Evaluation Test Runs Endpoints

Chrome DevTools for agents: daemon.pid write follows symlinks in /tmp fallback runtime directory

NocoDB: Server-Side Request Forgery via Spreadsheet Fetch URL

NocoDB: Refresh Tokens Persist Through Password Recovery

NocoDB: Stored Cross-Site Scripting via Secure Attachment

NocoDB: Server-Side Request Forgery via Base Migration URL

NocoDB: Server-Side Request Forgery via Spreadsheet Import Endpoint

OpenClaw: MCP Streamable HTTP redirects could forward configured custom headers to another origin

Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch

webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies

undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery. (CVE-2026-6733)

undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing (CVE-2026-6734)

undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding (CVE-2026-9679)