Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:51:42 +0000 CVE-2023-23936 — CRLF Injection in Nodejs ‘undici’ via host https://cve.radiocsirt.org/vuln/cve-2023-23936 <p><strong>Affected:</strong> nodejs undici</p> <p>Undici is an HTTP/1.1 client for Node.js. Starting with version 2.0.0 and prior to version 5.19.1, the undici library does not protect `host` HTTP header from CRLF injection vulnerabilities. This issue is patched in Undici v5.19.1. As a workaround, sanitize the `headers.host` string before passing to undici.</p> <p><strong>Affected:</strong> nodejs undici</p> <p>Undici is an HTTP/1.1 client for Node.js. Starting with version 2.0.0 and prior to version 5.19.1, the undici library does not protect `host` HTTP header from CRLF injection vulnerabilities. This issue is patched in Undici v5.19.1. As a workaround, sanitize the `headers.host` string before passing to undici.</p> https://cve.radiocsirt.org/vuln/cve-2023-23936