CVE WATCH / VULNERABILITY DETAIL
CVE-2026-87029
MEDIUMCVSS 5.9NVD feed
Published 15 October 2026 · tracked since 16 October 2026
Description
undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its decompress interceptor forwards decompressed response data to the downstream handler from zlib stream event callbacks without catching exceptions those callbacks may throw, and while undici'
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2025-61624
- CVE-2026-111284 MEDIUM 5.4
- CVE-2026-110917 MEDIUM 4.3
- CVE-2026-110919 HIGH 8.8
- CVE-2026-110920 HIGH 8.8
- CVE-2026-110921 HIGH 8.8
- CVE-2026-110922 HIGH 8.8
- CVE-2026-110913 HIGH 8.8
- CVE-2026-110914 HIGH 8.8
- CVE-2026-110915 HIGH 8.8