https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 20:59:32 +0000 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1081 certfr-2024-avi-1081 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1081 https://cve.radiocsirt.org/vuln/euvd-2026-160322 EUVD-2026-160322 https://cve.radiocsirt.org/vuln/euvd-2026-160322 https://cve.radiocsirt.org/vuln/fkie_cve-2024-38372 <p>Undici is an HTTP/1.1 client, written from scratch for Node.js. Depending on network and process conditions of a `fetch()` request, `response.arrayBuffer()` might include portion of memory from the Node.js process. This has been patched in v6.19.2.</p> <p>Undici is an HTTP/1.1 client, written from scratch for Node.js. Depending on network and process conditions of a `fetch()` request, `response.arrayBuffer()` might include portion of memory from the Node.js process. This has been patched in v6.19.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-38372 https://cve.radiocsirt.org/vuln/ghsa-3g92-w8c5-73pq <p><strong>Affected:</strong> npm: undici</p> <p>### Impact</p> <p>Depending on network and process conditions of a `fetch()` request, `response.arrayBuffer()` might include portion of memory from the Node.js process.</p> <p>### Patches</p> <p>This has been patched in v6.19.2.</p> <p>### Workarounds</p> <p>There are no known workaround.</p> <p>### References</p> <p>https://github.com/nodejs/undici/issues/3337 https://github.com/nodejs/undici/issues/3328 https://github.com/nodejs/undici/pull/3338 https://github.com/nodejs/undici/commit/f979ec3204ca489abf30e7d20e9fee9ea7711d36</p> <p><strong>Affected:</strong> npm: undici</p> <p>### Impact</p> <p>Depending on network and process conditions of a `fetch()` request, `response.arrayBuffer()` might include portion of memory from the Node.js process.</p> <p>### Patches</p> <p>This has been patched in v6.19.2.</p> <p>### Workarounds</p> <p>There are no known workaround.</p> <p>### References</p> <p>https://github.com/nodejs/undici/issues/3337 https://github.com/nodejs/undici/issues/3328 https://github.com/nodejs/undici/pull/3338 https://github.com/nodejs/undici/commit/f979ec3204ca489abf30e7d20e9fee9ea7711d36</p> https://cve.radiocsirt.org/vuln/ghsa-3g92-w8c5-73pq https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-38372 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: node-undici, Ubuntu:25.10: node-undici, Ubuntu:26.04:LTS: node-undici</p> <p>Undici is an HTTP/1.1 client, written from scratch for Node.js. Depending on network and process conditions of a `fetch()` request, `response.arrayBuffer()` might include portion of memory from the Node.js process. This has been patched in v6.19.2.</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: node-undici, Ubuntu:25.10: node-undici, Ubuntu:26.04:LTS: node-undici</p> <p>Undici is an HTTP/1.1 client, written from scratch for Node.js. Depending on network and process conditions of a `fetch()` request, `response.arrayBuffer()` might include portion of memory from the Node.js process. This has been patched in v6.19.2.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-38372 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1745 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in IBM App Connect Enterprise ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in IBM App Connect Enterprise ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1745