https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T10:02:54.557286+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-02885 bdu:2024-02885 2026-10-18T10:02:54.560900+00:00 bdu:2024-02885 https://cve.radiocsirt.org/vuln/euvd-2026-217237 EUVD-2026-217237 2026-10-18T10:02:54.560932+00:00 EUVD-2026-217237 https://cve.radiocsirt.org/vuln/fkie_cve-2024-24750 fkie_cve-2024-24750 2026-10-18T10:02:54.560946+00:00

Undici is an HTTP/1.1 client, written from scratch for Node.js. In affected versions calling `fetch(url)` and not consuming the incoming body ((or consuming it very slowing) will lead to a memory leak. This issue has been addressed in version 6.6.1. Users are advised to upgrade. Users unable to upgrade should make sure to always consume the incoming body.

 https://cve.radiocsirt.org/vuln/ghsa-9f24-jqhm-jfcw GHSA-9f24-jqhm-jfcw — fetch(url) leads to a memory leak in undici 2026-10-18T10:02:54.560974+00:00

Affected: npm: undici

### Impact

Calling `fetch(url)` and not consuming the incoming body ((or consuming it very slowing) will lead to a memory leak.

### Patches

Patched in v6.6.1

### Workarounds

Make sure to always consume the incoming body.

 https://cve.radiocsirt.org/vuln/gsd-2024-24750 gsd-2024-24750 2026-10-18T10:02:54.561001+00:00 gsd-2024-24750 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-24750 UBUNTU-CVE-2024-24750 2026-10-18T10:02:54.561013+00:00

Affected: Ubuntu:24.04:LTS: node-undici, Ubuntu:25.10: node-undici, Ubuntu:26.10: node-undici, Ubuntu:26.04:LTS: node-undici

Undici is an HTTP/1.1 client, written from scratch for Node.js. In affected versions calling `fetch(url)` and not consuming the incoming body ((or consuming it very slowing) will lead to a memory leak. This issue has been addressed in version 6.6.1. Users are advised to upgrade. Users unable to upgrade should make sure to always consume the incoming body.