Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2024-24750

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-9f24-jqhm-jfcw

fetch(url) leads to a memory leak in undici ### Impact Calling `fetch(url)` and not consuming the incoming body ((or consuming it very slowing) will lead to a memory leak. ### Patches Patched in v6.6.1 ### Workarounds Make sure to always consume the incoming body.

gitlab/npm/undici/CVE-2024-24750

Uncontrolled Resource Consumption Undici is an HTTP/1.1 client, written from scratch for Node.js. In affected versions calling `fetch(url)` and not consuming the incoming body ((or consuming it very slowing) will lead to a memory leak. This issue has been addressed in version 6.6.1. Users are advised to upgrade. Users unable to upgrade should make sure to always consume the incoming body.