plugin-cloudflare-0.31.0.tgz: 42 vulnerabilities (highest severity is: 9.9) #263

Vulnerable Library - plugin-cloudflare-0.31.0.tgz

Sample Path to Dependency File: /package.json

Path to vulnerable library: /package.json

CVE-2026-0933

Vulnerable Library - wrangler-4.33.0.tgz

Command-line interface for all things Cloudflare Workers

Library home page: https://registry.npmjs.org/wrangler/-/wrangler-4.33.0.tgz

Sample Path to Dependency File: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

• plugin-cloudflare-0.31.0.tgz (Root Library)
  • vite-plugin-1.12.3.tgz
    • ❌ wrangler-4.33.0.tgz (Vulnerable Library)

Found in base branch: main

Vulnerability Details

SummaryA command injection vulnerability (CWE-78) has been found to exist in the "wrangler pages deploy" command. The issue occurs because the "--commit-hash" parameter is passed directly to a shell command without proper validation or sanitization, allowing an attacker with control of "--commit-hash" to execute arbitrary commands on the system running Wrangler.
Root causeThe commitHash variable, derived from user input via the --commit-hash CLI argument, is interpolated directly into a shell command using template literals (e.g.,  execSync("git show -s --format=%B ${commitHash}")). Shell metacharacters are interpreted by the shell, enabling command execution.
ImpactThis vulnerability is generally hard to exploit, as it requires --commit-hash to be attacker controlled. The vulnerability primarily affects CI/CD environments where "wrangler pages deploy" is used in automated pipelines and the
--commit-hash parameter is populated from external, potentially untrusted sources. An attacker could exploit this to:

• Run any shell command.
• Exfiltrate environment variables.
• Compromise the CI runner to install backdoors or modify build artifacts.
  Credits Disclosed responsibly by kny4hacker.
  Mitigation
• Wrangler v4 users are requested to upgrade to Wrangler v4.59.1 or higher.
• Wrangler v3 users are requested to upgrade to Wrangler v3.114.17 or higher.
• Users on Wrangler v2 (EOL) should upgrade to a supported major version.

Publish Date: 2026-01-20

URL: CVE-2026-0933

CVSS 3 Score Details (9.9)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Scope: Changed
• Impact Metrics:
  • Confidentiality Impact: High
  • Integrity Impact: High
  • Availability Impact: High

Suggested Fix

Type: Upgrade version

Release Date: 2026-01-20

Fix Resolution (wrangler): 4.59.1

Direct dependency fix Resolution (@⁠storm-stack/plugin-cloudflare): 0.32.0

Step up your Open Source Security Game with Mend here

WS-2026-0060

Vulnerable Library - sharp-0.33.5.tgz

Library home page: https://registry.npmjs.org/sharp/-/sharp-0.33.5.tgz

Sample Path to Dependency File: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

• plugin-cloudflare-0.31.0.tgz (Root Library)
  • vite-plugin-1.12.3.tgz
    • miniflare-4.20250902.0.tgz
      • ❌ sharp-0.33.5.tgz (Vulnerable Library)

Found in base branch: main

Vulnerability Details

A number of vulnerabilities, two rated critical, have been discovered and fixed in the upstream libheif dependency bundled by sharp. These can lead to possible remote code execution on glibc-based Linux when processing untrusted input. sharp before 0.35.4 bundles libheif 1.23.1 or earlier; 0.35.4 provides libheif 1.23.2. Users relying on a globally-installed libheif should ensure they are on libheif 1.23.2.

Publish Date: 2026-08-27

URL: WS-2026-0060

CVSS 3 Score Details (9.3)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Local
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Changed
• Impact Metrics:
  • Confidentiality Impact: High
  • Integrity Impact: High
  • Availability Impact: High

Suggested Fix

Type: Upgrade version

Release Date: 2026-08-27

Fix Resolution: sharp - 0.35.4

Step up your Open Source Security Game with Mend here

CVE-2026-114112

Vulnerable Library - sharp-0.33.5.tgz

Library home page: https://registry.npmjs.org/sharp/-/sharp-0.33.5.tgz

Sample Path to Dependency File: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

• plugin-cloudflare-0.31.0.tgz (Root Library)
  • vite-plugin-1.12.3.tgz
    • miniflare-4.20250902.0.tgz
      • ❌ sharp-0.33.5.tgz (Vulnerable Library)

Found in base branch: main

Vulnerability Details

Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execution on glibc-based Linux by supplying crafted images. Attackers can submit malicious AVIF/HEIF input to applications processing untrusted images with sharp, triggering libheif decoding flaws to execute code.

Publish Date: 2026-10-21

URL: CVE-2026-114112

CVSS 3 Score Details (9.3)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Local
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Changed
• Impact Metrics:
  • Confidentiality Impact: High
  • Integrity Impact: High
  • Availability Impact: High

Suggested Fix

Type: Upgrade version

Origin: GHSA-rgj7-g3m4-5g8c

Release Date: 2026-10-21

Fix Resolution: sharp - 0.35.4

Step up your Open Source Security Game with Mend here

CVE-2026-114111

Vulnerable Library - sharp-0.33.5.tgz

Library home page: https://registry.npmjs.org/sharp/-/sharp-0.33.5.tgz

Sample Path to Dependency File: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

• plugin-cloudflare-0.31.0.tgz (Root Library)
  • vite-plugin-1.12.3.tgz
    • miniflare-4.20250902.0.tgz
      • ❌ sharp-0.33.5.tgz (Vulnerable Library)

Found in base branch: main

Vulnerability Details

sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerability (CVE-2026-96889) that, under certain runtime-specific conditions, can lead to code execution on glibc-based Linux. An attacker can supply a crafted SVG image that, when decoded by sharp through librsvg, may result in arbitrary code execution.

Publish Date: 2026-10-21

URL: CVE-2026-114111

CVSS 3 Score Details (9.3)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Local
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Changed
• Impact Metrics:
  • Confidentiality Impact: High
  • Integrity Impact: High
  • Availability Impact: High

Suggested Fix

Type: Upgrade version

Origin: GHSA-wq5f-xc86-pv6w

Release Date: 2026-10-21

Fix Resolution: sharp - 0.35.5

Step up your Open Source Security Game with Mend here

CVE-2026-114113

Vulnerable Library - sharp-0.33.5.tgz

Library home page: https://registry.npmjs.org/sharp/-/sharp-0.33.5.tgz

Sample Path to Dependency File: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

• plugin-cloudflare-0.31.0.tgz (Root Library)
  • vite-plugin-1.12.3.tgz
    • miniflare-4.20250902.0.tgz
      • ❌ sharp-0.33.5.tgz (Vulnerable Library)

Found in base branch: main

Vulnerability Details

Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities (CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 and CVE-2026-69242) in its GIF, TIFF and VIPS image decoders. Attackers can supply crafted GIF, TIFF or VIPS files to applications using sharp to process untrusted input, triggering these libvips flaws.

Publish Date: 2026-10-21

URL: CVE-2026-114113

CVSS 3 Score Details (8.7)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Local
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Scope: Changed
• Impact Metrics:
  • Confidentiality Impact: Low
  • Integrity Impact: High
  • Availability Impact: High

Suggested Fix

Type: Upgrade version

Origin: GHSA-f88m-g3jw-g9cj

Release Date: 2026-10-21

Fix Resolution (sharp): 0.35.0

Direct dependency fix Resolution (@⁠storm-stack/plugin-cloudflare): 0.32.0

Step up your Open Source Security Game with Mend here

CVE-2026-87018

Vulnerable Library - undici-7.16.0.tgz

An HTTP/1.1 client, written from scratch for Node.js

Library home page: https://registry.npmjs.org/undici/-/undici-7.16.0.tgz

Sample Path to Dependency File: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

• plugin-cloudflare-0.31.0.tgz (Root Library)
  • vite-plugin-1.12.3.tgz
    • miniflare-4.20250902.0.tgz
      • ❌ undici-7.16.0.tgz (Vulnerable Library)

Found in base branch: main

Vulnerability Details

undici is an HTTP client library for Node.js. In versions 4.2.1 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, the client process crashes when a TLS 1.2 server renegotiates after the connection is established and presents a different, CA-trusted certificate whose hostname does not match the requested host. Node.js re-runs hostname verification on the renegotiated handshake and destroys the socket with a certificate-altname error, but undici's established-socket error handler asserted that this error code could never occur, so the peer-controlled error became an uncaught assertion that terminates the Node.js process, affecting both the HTTP/1.1 and HTTP/2 paths. A malicious or compromised HTTPS endpoint reached through undici or the global fetch() can crash the client with a single server-initiated renegotiation, taking down all in-flight requests and background work in the process, and exploitation needs no CA compromise because the attacker controls the endpoint and can present two ordinary valid certificates. Only TLS 1.2 is affected, since TLS 1.3 does not support renegotiation. The issue is fixed in undici 6.29.1, 7.30.1, and 8.12.2, and users should upgrade to one of those versions or later. As a workaround, restrict outbound connections to TLS 1.3 so renegotiation cannot occur, when the target endpoints support it.

Publish Date: 2026-10-15

URL: CVE-2026-87018

CVSS 3 Score Details (7.5)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: None
  • Integrity Impact: None
  • Availability Impact: High

Suggested Fix

Type: Upgrade version

Origin: GHSA-qrxm-fqhp-jwvm

Release Date: 2026-10-15

Fix Resolution: undici - 7.30.1

Step up your Open Source Security Game with Mend here

CVE-2026-48779

Vulnerable Library - ws-8.18.0.tgz

Library home page: https://registry.npmjs.org/ws/-/ws-8.18.0.tgz

Sample Path to Dependency File: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

• plugin-cloudflare-0.31.0.tgz (Root Library)
  • vite-plugin-1.12.3.tgz
    • ❌ ws-8.18.0.tgz (Vulnerable Library)

Found in base branch: main

Vulnerability Details

ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memory exhaustion DoS vulnerability. A peer can send a high volume of exceptionally small fragments and data chunks, with modest network traffic, to force the remote peer into allocating and holding structural wrappers that consume far more memory than the default documented message-size limit, leading to process termination due to OOM. This issue has been fixed in versions 5.2.5, 6.2.4, 7.5.11, and 8.21.0.

Publish Date: 2026-06-16

URL: CVE-2026-48779

CVSS 3 Score Details (7.5)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: None
  • Integrity Impact: None
  • Availability Impact: High

Suggested Fix

Type: Upgrade version

Origin: GHSA-96hv-2xvq-fx4p

Release Date: 2026-06-15

Fix Resolution: ws - 8.21.0

Step up your Open Source Security Game with Mend here

CVE-2026-2229

Vulnerable Library - undici-7.16.0.tgz

An HTTP/1.1 client, written from scratch for Node.js

Library home page: https://registry.npmjs.org/undici/-/undici-7.16.0.tgz

Sample Path to Dependency File: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

• plugin-cloudflare-0.31.0.tgz (Root Library)
  • vite-plugin-1.12.3.tgz
    • miniflare-4.20250902.0.tgz
      • ❌ undici-7.16.0.tgz (Vulnerable Library)

Found in base branch: main

Vulnerability Details

ImpactThe undici WebSocket client is vulnerable to a denial-of-service attack due to improper validation of the server_max_window_bits parameter in the permessage-deflate extension. When a WebSocket client connects to a server, it automatically advertises support for permessage-deflate compression. A malicious server can respond with an out-of-range server_max_window_bits value (outside zlib's valid range of 8-15). When the server subsequently sends a compressed frame, the client attempts to create a zlib InflateRaw instance with the invalid windowBits value, causing a synchronous RangeError exception that is not caught, resulting in immediate process termination.
The vulnerability exists because:

• The isValidClientWindowBits() function only validates that the value contains ASCII digits, not that it falls within the valid range 8-15
• The createInflateRaw() call is not wrapped in a try-catch block
• The resulting exception propagates up through the call stack and crashes the Node.js process

Publish Date: 2026-03-12

URL: CVE-2026-2229

CVSS 3 Score Details (7.5)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: None
  • Integrity Impact: None
  • Availability Impact: High

Suggested Fix

Type: Upgrade version

Origin: GHSA-v9p9-hfj2-hcw8

Release Date: 2026-03-12

Fix Resolution: undici - 7.24.0

Step up your Open Source Security Game with Mend here

CVE-2026-19534

Vulnerable Library - undici-7.16.0.tgz

An HTTP/1.1 client, written from scratch for Node.js

Library home page: https://registry.npmjs.org/undici/-/undici-7.16.0.tgz

Sample Path to Dependency File: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

• plugin-cloudflare-0.31.0.tgz (Root Library)
  • vite-plugin-1.12.3.tgz
    • miniflare-4.20250902.0.tgz
      • ❌ undici-7.16.0.tgz (Vulnerable Library)

Found in base branch: main

Vulnerability Details

undici's WebSocket client crashes the whole Node.js process during the opening handshake when a server responds with a subprotocol that the client never requested. A default WebSocket connection sends no subprotocol, but if the server's 101 response includes a Sec-WebSocket-Protocol header, undici dereferences a null value while checking it against the requested list and throws an uncaught TypeError. Because that code runs inside a microtask with no surrounding error handling, the exception propagates and terminates the process under Node's default behavior, instead of gracefully failing the connection as required by the WebSocket protocol. Any application that opens a WebSocket to an attacker-controlled or compromised server, or over a plaintext connection subject to a machine-in-the-middle, can be crashed remotely without authentication in the default configuration. This affects undici versions from 6.7.0 up to 6.28.1, from 7.0.0 up to 7.29.1, and from 8.0.0 up to 8.10.2. Users should upgrade to undici 6.28.1, 7.29.1, or 8.10.2.

Publish Date: 2026-09-04

URL: CVE-2026-19534

CVSS 3 Score Details (7.5)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: None
  • Integrity Impact: None
  • Availability Impact: High

Suggested Fix

Type: Upgrade version

Origin: GHSA-rfgv-xxqx-mfg5

Release Date: 2026-09-04

Fix Resolution: undici - 7.29.1

Step up your Open Source Security Game with Mend here

CVE-2026-1526

Vulnerable Library - undici-7.16.0.tgz

An HTTP/1.1 client, written from scratch for Node.js

Library home page: https://registry.npmjs.org/undici/-/undici-7.16.0.tgz

Sample Path to Dependency File: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

• plugin-cloudflare-0.31.0.tgz (Root Library)
  • vite-plugin-1.12.3.tgz
    • miniflare-4.20250902.0.tgz
      • ❌ undici-7.16.0.tgz (Vulnerable Library)

Found in base branch: main

Vulnerability Details

The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during permessage-deflate decompression. When a WebSocket connection negotiates the permessage-deflate extension, the client decompresses incoming compressed frames without enforcing any limit on the decompressed data size. A malicious WebSocket server can send a small compressed frame (a "decompression bomb") that expands to an extremely large size in memory, causing the Node.js process to exhaust available memory and crash or become unresponsive.
The vulnerability exists in the PerMessageDeflate.decompress() method, which accumulates all decompressed chunks in memory and concatenates them into a single Buffer without checking whether the total size exceeds a safe threshold.

Publish Date: 2026-03-12

URL: CVE-2026-1526

CVSS 3 Score Details (7.5)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: None
  • Integrity Impact: None
  • Availability Impact: High

Suggested Fix

Type: Upgrade version

Origin: GHSA-vrm6-8vpv-qv8q

Release Date: 2026-03-12

Fix Resolution: undici - 7.24.0

Step up your Open Source Security Game with Mend here

CVE-2026-12151

Vulnerable Library - undici-7.16.0.tgz

An HTTP/1.1 client, written from scratch for Node.js

Library home page: https://registry.npmjs.org/undici/-/undici-7.16.0.tgz

Sample Path to Dependency File: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

• plugin-cloudflare-0.31.0.tgz (Root Library)
  • vite-plugin-1.12.3.tgz
    • miniflare-4.20250902.0.tgz
      • ❌ undici-7.16.0.tgz (Vulnerable Library)

Found in base branch: main

Vulnerability Details

Impact:
The undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but does not enforce a limit on the number of fragments. A malicious WebSocket server can stream many small or empty continuation frames that each pass per-frame and cumulative-size validation, collectively causing unbounded memory growth in the client process. The result is memory exhaustion and a denial of service.
Affected applications are those using the undici WebSocket client (new WebSocket(...)) or the WebSocketStream API that can be induced to connect to an attacker-controlled or compromised WebSocket endpoint.
All releases starting at undici 6.17.0 are affected.
Patches: Upgrade to undici >= 6.26.0, >= 7.28.0, or >= 8.5.0. Workarounds:
No workaround is available. The fix must be applied through an upgrade.

Publish Date: 2026-06-17

URL: CVE-2026-12151

CVSS 3 Score Details (7.5)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: None
  • Integrity Impact: None
  • Availability Impact: High

Suggested Fix

Type: Upgrade version

Origin: GHSA-vxpw-j846-p89q

Release Date: 2026-06-17

Fix Resolution (undici): 7.28.0

Direct dependency fix Resolution (@⁠storm-stack/plugin-cloudflare): 0.32.0

Step up your Open Source Security Game with Mend here

CVE-2026-13697

Vulnerable Library - undici-7.16.0.tgz

An HTTP/1.1 client, written from scratch for Node.js

Library home page: https://registry.npmjs.org/undici/-/undici-7.16.0.tgz

Sample Path to Dependency File: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

• plugin-cloudflare-0.31.0.tgz (Root Library)
  • vite-plugin-1.12.3.tgz
    • miniflare-4.20250902.0.tgz
      • ❌ undici-7.16.0.tgz (Vulnerable Library)

Found in base branch: main

Vulnerability Details

undici's cache interceptor mishandles malformed Cache-Control private directives. In undici 7.0.0 up to before 7.29.0 and 8.0.0 up to before 8.9.0, a response carrying a degenerate qualified private directive, such as private set to an empty value, can be stored in the default shared cache and later served to a different caller with the same cache key, disclosing private response bodies and headers including Set-Cookie. Separately, a Cache-Control header that combines an unqualified private directive with a qualified one triggers an uncaught TypeError in the cache-control parser, which rejects the request and, depending on the consumer's error handling, can terminate the process. Both issues affect applications using the cache interceptor in shared mode, including the default configuration. The issues are fixed in undici 7.29.0 and 8.9.0.

Publish Date: 2026-07-29

URL: CVE-2026-13697

CVSS 3 Score Details (7.4)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: High
  • Integrity Impact: None
  • Availability Impact: High

Suggested Fix

Type: Upgrade version

Origin: GHSA-4cwx-7wf7-3272

Release Date: 2026-07-29

Fix Resolution: undici - 7.29.0

Step up your Open Source Security Game with Mend here

CVE-2026-109829

Vulnerable Library - undici-7.16.0.tgz

An HTTP/1.1 client, written from scratch for Node.js

Library home page: https://registry.npmjs.org/undici/-/undici-7.16.0.tgz

Sample Path to Dependency File: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

• plugin-cloudflare-0.31.0.tgz (Root Library)
  • vite-plugin-1.12.3.tgz
    • miniflare-4.20250902.0.tgz
      • ❌ undici-7.16.0.tgz (Vulnerable Library)

Found in base branch: main

Vulnerability Details

undici is an HTTP client library for Node.js. In versions 7.0.0 through 7.30.0 and 8.0.0 through 8.12.1, when an originless Agent composes the redirect and cache interceptors in that order with a shared cache store, the cache builds its key from the original request URL before the redirect handler changes the origin, so a response produced after a cross-origin redirect is stored under the original key. An attacker who controls the target of a redirect from a trusted URL can have their response cached under that trusted URL and served to later callers, allowing persistent cache poisoning, and the same key confusion lets a private, non-stored redirect response to a user-specific resource be stored under the original URL and served to a later unauthenticated caller, disclosing private data. Applications are affected only when an originless Agent, a shared cache store, and the redirect-then-cache composition are all used. The issue is fixed in undici 7.30.1 and 8.12.2, which verify the producing origin still matches the cache key and preserve each redirect hop's cache-control policy before storing, and users should upgrade to one of those versions or later. As a workaround, compose the cache interceptor before the redirect interceptor, use per-origin dispatchers and cache stores, or disable shared caching on redirect-capable requests.

Publish Date: 2026-10-15

URL: CVE-2026-109829

CVSS 3 Score Details (7.4)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: High
  • Integrity Impact: High
  • Availability Impact: None

Suggested Fix

Type: Upgrade version

Origin: GHSA-4w7w-5xrc-9h26

Release Date: 2026-10-15

Fix Resolution: undici - 7.30.1

Step up your Open Source Security Game with Mend here

CVE-2026-109383

Vulnerable Library - undici-7.16.0.tgz

An HTTP/1.1 client, written from scratch for Node.js

Library home page: https://registry.npmjs.org/undici/-/undici-7.16.0.tgz

Sample Path to Dependency File: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

• plugin-cloudflare-0.31.0.tgz (Root Library)
  • vite-plugin-1.12.3.tgz
    • miniflare-4.20250902.0.tgz
      • ❌ undici-7.16.0.tgz (Vulnerable Library)

Found in base branch: main

Vulnerability Details

undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its Agent dispatcher passes its constructor options through a JSON-based deep clone before forwarding them to each per-origin pool, and because JSON cannot represent functions, a caller-supplied tls option containing a checkServerIdentity callback is silently dropped before it reaches the TLS layer. As a result, a TLS peer whose certificate a custom checkServerIdentity was written to reject, but which passes Node's default hostname and chain checks, is silently accepted. Because Agent is the default dispatcher behind request, fetch, and setGlobalDispatcher, this affects the path most applications use, and EnvHttpProxyAgent is affected on its direct and no-proxy routes as well, while only applications that pass a function-valued tls option such as a custom checkServerIdentity for certificate or public-key pinning are at risk. The issue is fixed in undici 6.29.1, 7.30.1, and 8.12.2, which preserve the tls option outside the JSON clone so custom verification callbacks are forwarded unchanged, and users should upgrade to one of those versions or later. As a workaround, pass the TLS options through connect instead of tls, or for proxied destinations use requestTls and proxyTls.

Publish Date: 2026-10-15

URL: CVE-2026-109383

CVSS 3 Score Details (7.4)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: High
  • Integrity Impact: High
  • Availability Impact: None

Suggested Fix

Type: Upgrade version

Origin: GHSA-2m5v-pch6-74hx

Release Date: 2026-10-15

Fix Resolution: undici - 7.30.1

Step up your Open Source Security Game with Mend here

CVE-2026-84933

Vulnerable Library - undici-7.16.0.tgz

An HTTP/1.1 client, written from scratch for Node.js

Library home page: https://registry.npmjs.org/undici/-/undici-7.16.0.tgz

Sample Path to Dependency File: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

• plugin-cloudflare-0.31.0.tgz (Root Library)
  • vite-plugin-1.12.3.tgz
    • miniflare-4.20250902.0.tgz
      • ❌ undici-7.16.0.tgz (Vulnerable Library)

Found in base branch: main

Vulnerability Details

undici's cache interceptor does not handle the Set-Cookie response header anywhere in its cache path, so it neither refuses to store nor strips that header. In shared cache mode, which is the default, an otherwise cacheable response that carries a Set-Cookie header, for example one marked with a public and max-age directive, is stored and then re-served to a later caller that matches the same cache key. As a result one caller's cookie is disclosed to a different caller, and an untrusted server can inject cookies into cached responses served to all subsequent callers. This violates the requirement that a shared cache must not store cookies. This affects undici versions from 7.0.0 up to 7.29.1 and from 8.0.0 up to 8.10.2. Users should upgrade to undici 7.29.1 or 8.10.2.

Publish Date: 2026-09-04

URL: CVE-2026-84933

CVSS 3 Score Details (6.5)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: High
  • Integrity Impact: Low
  • Availability Impact: None

Suggested Fix

Type: Upgrade version

Origin: GHSA-2jfj-6hjv-fm6j

Release Date: 2026-09-04

Fix Resolution: undici - 7.29.1

Step up your Open Source Security Game with Mend here

CVE-2026-1525

Vulnerable Library - undici-7.16.0.tgz

An HTTP/1.1 client, written from scratch for Node.js

Library home page: https://registry.npmjs.org/undici/-/undici-7.16.0.tgz

Sample Path to Dependency File: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

• plugin-cloudflare-0.31.0.tgz (Root Library)
  • vite-plugin-1.12.3.tgz
    • miniflare-4.20250902.0.tgz
      • ❌ undici-7.16.0.tgz (Vulnerable Library)

Found in base branch: main

Vulnerability Details

Undici allows duplicate HTTP Content-Length headers when they are provided in an array with case-variant names (e.g., Content-Length and content-length). This produces malformed HTTP/1.1 requests with multiple conflicting Content-Length values on the wire.
Who is impacted:

• Applications using undici.request(), undici.Client, or similar low-level APIs with headers passed as flat arrays
• Applications that accept user-controlled header names without case-normalization
  Potential consequences:
• Denial of Service: Strict HTTP parsers (proxies, servers) will reject requests with duplicate Content-Length headers (400 Bad Request)
• HTTP Request Smuggling: In deployments where an intermediary and backend interpret duplicate headers inconsistently (e.g., one uses the first value, the other uses the last), this can enable request smuggling attacks leading to ACL bypass, cache poisoning, or credential hijacking

Publish Date: 2026-03-12

URL: CVE-2026-1525

CVSS 3 Score Details (6.5)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: None
  • Integrity Impact: Low
  • Availability Impact: Low

Suggested Fix

Type: Upgrade version

Origin: GHSA-2mjp-6q6p-2qxm

Release Date: 2026-03-12

Fix Resolution: undici - 7.24.0

Step up your Open Source Security Game with Mend here

CVE-2026-120474

Vulnerable Library - undici-7.16.0.tgz

An HTTP/1.1 client, written from scratch for Node.js

Library home page: https://registry.npmjs.org/undici/-/undici-7.16.0.tgz

Sample Path to Dependency File: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

• plugin-cloudflare-0.31.0.tgz (Root Library)
  • vite-plugin-1.12.3.tgz
    • miniflare-4.20250902.0.tgz
      • ❌ undici-7.16.0.tgz (Vulnerable Library)

Found in base branch: main

Vulnerability Details

undici is an HTTP client for Node.js. In versions 7.0.0 through 7.30.1 and 8.0.0 through 8.12.3, when the redirect interceptor and a shared response cache are used together, an authenticated request that is redirected to a same-origin target has the final response stored under the original request's cache key. That key omits the credential and carries no Vary header, so a later anonymous or different user can be served the first user's private response body. This results in cross-user disclosure of cached private responses. The issue is fixed in undici 7.30.2 and 8.12.4, and users should upgrade to one of those versions or later.

Publish Date: 2026-11-06

URL: CVE-2026-120474

CVSS 3 Score Details (6.5)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: High
  • Integrity Impact: Low
  • Availability Impact: None

Suggested Fix

Type: Upgrade version

Release Date: 2026-11-06

Fix Resolution: undici - 7.30.2

Step up your Open Source Security Game with Mend here

CVE-2026-9679

Vulnerable Library - undici-7.16.0.tgz

An HTTP/1.1 client, written from scratch for Node.js

Library home page: https://registry.npmjs.org/undici/-/undici-7.16.0.tgz

Sample Path to Dependency File: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

• plugin-cloudflare-0.31.0.tgz (Root Library)
  • vite-plugin-1.12.3.tgz
    • miniflare-4.20250902.0.tgz
      • ❌ undici-7.16.0.tgz (Vulnerable Library)

Found in base branch: main

Vulnerability Details

Impact:
undici's cookie parser in parseSetCookie percent-decodes cookie values via qsUnescape, turning encoded sequences like %0D%0A, %00, %3B, and %3D into their literal byte equivalents. RFC 6265 §5.4 does not specify any decoding and browsers do not decode either.
Applications that parse a Set-Cookie header and then forward the parsed value into a response header (proxies, middleware, SSR frameworks) become vulnerable to HTTP response header injection: an attacker-controlled upstream can inject arbitrary Set-Cookie, Location, or Cache-Control headers into the application's downstream response, enabling session fixation, open redirect, or cache poisoning.
Affected applications are those that use undici's cookie parsing (parseSetCookie, parseCookie, getSetCookies) and forward the parsed cookie value into a response header.
This was introduced in undici 7.0.0 via PR #⁠3789.
Patches:
Upgrade to undici v6.26.0, v7.28.0 or v8.5.0.
Workarounds:
If upgrade is not immediately possible, do not forward values returned by parseSetCookie/parseCookie/getSetCookies directly into response headers; sanitize the value first to strip or reject CR, LF, NUL, ;, and = bytes.

Publish Date: 2026-06-17

URL: CVE-2026-9679

CVSS 3 Score Details (5.9)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: None
  • Integrity Impact: High
  • Availability Impact: None

Suggested Fix

Type: Upgrade version

Origin: GHSA-p88m-4jfj-68fv

Release Date: 2026-06-17

Fix Resolution (undici): 7.28.0

Direct dependency fix Resolution (@⁠storm-stack/plugin-cloudflare): 0.32.0

Step up your Open Source Security Game with Mend here

CVE-2026-9678

Vulnerable Library - undici-7.16.0.tgz

An HTTP/1.1 client, written from scratch for Node.js

Library home page: https://registry.npmjs.org/undici/-/undici-7.16.0.tgz

Sample Path to Dependency File: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

• plugin-cloudflare-0.31.0.tgz (Root Library)
  • vite-plugin-1.12.3.tgz
    • miniflare-4.20250902.0.tgz
      • ❌ undici-7.16.0.tgz (Vulnerable Library)

Found in base branch: main

Vulnerability Details

Impact:
Undici's cache interceptor incorrectly classifies some responses as cacheable when the upstream Cache-Control header uses whitespace-padded qualified private or no-cache field names such as private=" authorization" or no-cache="\tauthorization". The parser preserves the surrounding whitespace, so later comparisons against the literal authorization field name fail and the response is stored.
In shared-cache mode, this allows a response containing one user's authenticated data to be served from cache to a subsequent caller, including an unauthenticated caller, when both requests resolve to the same cache key.
Affected applications are those that explicitly enable the cache interceptor (interceptors.cache()) in shared mode, forward Authorization headers upstream, and receive cacheable responses with non-canonical qualified private or no-cache directives.
Patches:
Upgrade to undici v7.28.0 or v8.5.0.
Workarounds:
If upgrade is not immediately possible, disable shared-cache mode for traffic that includes Authorization headers, avoid caching responses to authenticated requests, or add Vary: Authorization upstream.

Publish Date: 2026-06-17

URL: CVE-2026-9678

CVSS 3 Score Details (5.9)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: High
  • Integrity Impact: None
  • Availability Impact: None

Suggested Fix

Type: Upgrade version

Origin: GHSA-pr7r-676h-xcf6

Release Date: 2026-06-17

Fix Resolution (undici): 7.28.0

Direct dependency fix Resolution (@⁠storm-stack/plugin-cloudflare): 0.32.0

Step up your Open Source Security Game with Mend here