CVE-2026-1528

EUVD-2026-11703
ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length. undici's ByteParser overflows internal math, ends up in an invalid state, and throws a fatal TypeError that terminates the process.

Patches

Patched in the undici version v7.24.0 and v6.24.0. Users should upgrade to this version or later.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 39%
Affected Products (NVD)
VendorProductVersion
nodejsundici
𝑥
< 6.24.0
nodejsundici
7.0.0 ≤
𝑥
< 7.24.0
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
Red HatCryostat 4 on RHEL 9
4.2.0-9 ≤
𝑥
< *
ADP
Red HatCryostat 4 on RHEL 9
4.2.0-9 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10
1:22.22.2-1.el10_1 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10
1:24.14.1-2.el10_1 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
1:22.22.2-2.el10_0 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8
8100020260331102257.6d880403 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8
8100020260408131901.6d880403 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9
9070020260401095228.rhel9 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9
9070020260402152654.rhel9 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
9060020260409121057.rhel9 ≤
𝑥
< *
ADP
Red HatCluster Observability Operator 1.5.0
1782839279 ≤
𝑥
< *
ADP
Red HatCluster Observability Operator 1.5.0
1782840539 ≤
𝑥
< *
ADP
Red HatCluster Observability Operator 1.5.0
1782839996 ≤
𝑥
< *
ADP
Red HatRed Hat Developer Hub 1.8
1776784286 ≤
𝑥
< *
ADP
Red HatRed Hat Developer Hub 1.9
1777903262 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift AI 2.16
1774282136 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Dev Spaces 3.28
1779814592 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Pipelines 1.2
1779910201 ≤
𝑥
< *
ADP
Debian logo
Debian Releases
Debian Product
Codename
node-undici
bookworm
5.15.0+dfsg1+~cs20.10.9.3-1+deb12u4
fixed
bookworm (security)
5.15.0+dfsg1+~cs20.10.9.3-1+deb12u3
fixed
forky
8.5.0+dfsg+~cs3.2.0-3
fixed
sid
8.5.0+dfsg+~cs3.2.0-3
fixed
trixie
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
node-undici
jammy
dne
noble
needs-triage
questing
ignored
resolute
needs-triage
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
nodejs20
Amazon Linux 2023
1:20.20.1-1.amzn2023.0.3
fixed
nodejs20-debuginfo
Amazon Linux 2023
1:20.20.1-1.amzn2023.0.3
fixed
nodejs20-debugsource
Amazon Linux 2023
1:20.20.1-1.amzn2023.0.3
fixed
nodejs20-devel
Amazon Linux 2023
1:20.20.1-1.amzn2023.0.3
fixed
nodejs20-docs
Amazon Linux 2023
1:20.20.1-1.amzn2023.0.3
fixed
nodejs20-full-i18n
Amazon Linux 2023
1:20.20.1-1.amzn2023.0.3
fixed
nodejs20-libs
Amazon Linux 2023
1:20.20.1-1.amzn2023.0.3
fixed
nodejs20-libs-debuginfo
Amazon Linux 2023
1:20.20.1-1.amzn2023.0.3
fixed
nodejs20-npm
Amazon Linux 2023
1:10.8.2-1.20.20.1.1.amzn2023.0.3
fixed
nodejs22
Amazon Linux 2023
1:22.22.1-1.amzn2023.0.2
fixed
nodejs22-debuginfo
Amazon Linux 2023
1:22.22.1-1.amzn2023.0.2
fixed
nodejs22-debugsource
Amazon Linux 2023
1:22.22.1-1.amzn2023.0.2
fixed
nodejs22-devel
Amazon Linux 2023
1:22.22.1-1.amzn2023.0.2
fixed
nodejs22-docs
Amazon Linux 2023
1:22.22.1-1.amzn2023.0.2
fixed
nodejs22-full-i18n
Amazon Linux 2023
1:22.22.1-1.amzn2023.0.2
fixed
nodejs22-libs
Amazon Linux 2023
1:22.22.1-1.amzn2023.0.2
fixed
nodejs22-libs-debuginfo
Amazon Linux 2023
1:22.22.1-1.amzn2023.0.2
fixed
nodejs22-npm
Amazon Linux 2023
1:10.9.4-1.22.22.1.1.amzn2023.0.2
fixed
nodejs24
Amazon Linux 2023
1:24.14.0-1.amzn2023.0.2
fixed
nodejs24-debuginfo
Amazon Linux 2023
1:24.14.0-1.amzn2023.0.2
fixed
nodejs24-debugsource
Amazon Linux 2023
1:24.14.0-1.amzn2023.0.2
fixed
nodejs24-devel
Amazon Linux 2023
1:24.14.0-1.amzn2023.0.2
fixed
nodejs24-docs
Amazon Linux 2023
1:24.14.0-1.amzn2023.0.2
fixed
nodejs24-full-i18n
Amazon Linux 2023
1:24.14.0-1.amzn2023.0.2
fixed
nodejs24-libs
Amazon Linux 2023
1:24.14.0-1.amzn2023.0.2
fixed
nodejs24-libs-debuginfo
Amazon Linux 2023
1:24.14.0-1.amzn2023.0.2
fixed
nodejs24-npm
Amazon Linux 2023
1:11.9.0-1.24.14.0.1.amzn2023.0.2
fixed
v8-11.3-devel
Amazon Linux 2023
3:11.3.244.8-1.20.20.1.1.amzn2023.0.3
fixed
v8-12.4-devel
Amazon Linux 2023
3:12.4.254.21-1.22.22.1.1.amzn2023.0.2
fixed
v8-13.6-devel
Amazon Linux 2023
3:13.6.233.17-1.24.14.0.1.amzn2023.0.2
fixed