undici: undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching
undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching (low). GHSA-g8m3-5g58-fq7m, CVE-2026-11525.
osv.devquote checked- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?