CVE WATCH / VULNERABILITY DETAIL
CVE-2026-109855
HIGHCVSS 7.5NVD feed
Published 15 October 2026 · tracked since 16 October 2026
Description
undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client, which is enabled by default when HTTP/2 is allowed, mishandles a failed WebSocket handshake over HTTP/2: the request is already marked completed, so the abort becomes a no-op and the under
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-110924 MEDIUM 4.8
- CVE-2026-110927 MEDIUM 4.3
- CVE-2026-106160 MEDIUM 5.4
- CVE-2026-99999 CRITICAL 9.3
- CVE-2026-110723 HIGH 7.5
- CVE-2026-109686 CRITICAL 9.8
- CVE-2026-107416 HIGH 7.5
- CVE-2026-8145 MEDIUM 5.4
- CVE-2026-110726 MEDIUM 6.5
- CVE-2026-79824 HIGH 8