These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-18540 is a vulnerability in undici that can cause downstream response splitting or desynchronization when an application forwards a response through a framing-sensitive path. This happens when an upstream server delivers part of a body without a trustworthy resume checkpoint and then closes the connection, answering the resumed range request with more bytes.
CVE-2026-85014 debrief based on the supplied source corpus. The undici experimental WebSocketStream client crashes the Node.js process when a remote peer closes the TCP connection without a WebSocket close handshake, affecting undici versions 7.0.0 through 7.29.1 and 8.0.0 through 8.10.2. This vulnerability allows an untrusted server to crash a client with a single abrupt disconnect. Defenders should asse [truncated]
CVE-2026-85008 is a vulnerability in undici, a Node.js module, that allows an origin to serve stale cache entries to a client's state-changing requests, leading to an integrity failure. The vulnerability affects undici versions from 7.0.0 to 7.29.1 and from 8.0.0 to 8.10.2. Users should upgrade to undici 7.29.1 or 8.10.2. This issue arises from a flaw in undici's cache interceptor logic, which fails to pr [truncated]
CVE-2026-9697 is a high-severity vulnerability (CVSS score of 7.4) affecting undici's ProxyAgent when used with SOCKS5 proxy URIs. The issue causes the requestTls option to be silently dropped, leading to a fallback to Node's default trust store. This can result in unintended trust anchor changes, allowing for potential MITM attacks. The vulnerability was introduced in undici version 7.23.0 and can be mit [truncated]
The CVE record describes a vulnerability in undici's cookie parser. The parser percent-decodes cookie values via qsUnescape, which can lead to HTTP response header injection. This vulnerability was introduced in undici 7.0.0 and can be exploited by an attacker-controlled upstream. Affected applications are those that use undici's cookie parsing and forward the parsed cookie value into a response header. T [truncated]
CVE-2026-9678 is a vulnerability in Undici's cache interceptor. The cache interceptor incorrectly classifies some responses as cacheable when the upstream Cache-Control header uses whitespace-padded qualified private or no-cache field names. This allows a response containing one user's authenticated data to be served from cache to a subsequent caller, including an unauthenticated caller, when both request [truncated]
CVE-2026-6734 is a high-severity vulnerability in the undici library, affecting versions 7.23.0 through 8.1.0. The vulnerability causes cross-origin request routing when using Socks5ProxyAgent, leading to potential credential and data exposure, as well as silent downgrading of HTTPS requests to HTTP. This issue arises because undici reuses a single connection pool across different origins without verifyin [truncated]
CVE-2026-6733 is a vulnerability in Undici's HTTP/1.1 client that allows response queue poisoning on reused keep-alive sockets. An attacker-controlled upstream server can inject an unsolicited HTTP/1.1 response onto an idle socket after a request completes. When the client dispatches the next request on that socket, it associates the injected response with the new request, causing responses to be delivere [truncated]
CVE-2026-11525 is a vulnerability in undici, a Node.js HTTP/1.1 client. When undici parses a Set-Cookie header, it accepts any SameSite attribute value containing 'Strict', 'Lax', or 'None' as a substring, rather than matching exactly as per RFC 6265. This allows malicious servers to coerce consumers into adopting weaker SameSite cookie policies, potentially leading to security downgrades. The issue was i [truncated]
The undici WebSocket client is vulnerable to a denial-of-service attack due to unbounded memory growth caused by a malicious WebSocket server streaming many small or empty continuation frames. This issue affects applications using the undici WebSocket client or the WebSocketStream API that connect to an attacker-controlled or compromised WebSocket endpoint. The vulnerability is present in undici versions [truncated]