Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 03:08:12 +0000 CVE-2022-31150 — CRLF injection in request headers https://cve.radiocsirt.org/vuln/cve-2022-31150 <p><strong>Affected:</strong> nodejs undici</p> <p>undici is an HTTP/1.1 client, written from scratch for Node.js. It is possible to inject CRLF sequences into request headers in undici in versions less than 5.7.1. A fix was released in version 5.8.0. Sanitizing all HTTP headers from untrusted sources to eliminate `\r\n` is a workaround for this issue.</p> <p><strong>Affected:</strong> nodejs undici</p> <p>undici is an HTTP/1.1 client, written from scratch for Node.js. It is possible to inject CRLF sequences into request headers in undici in versions less than 5.7.1. A fix was released in version 5.8.0. Sanitizing all HTTP headers from untrusted sources to eliminate `\r\n` is a workaround for this issue.</p> https://cve.radiocsirt.org/vuln/cve-2022-31150