undici: undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields
undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields (moderate). GHSA-v3r7-h72x-cjcm, CVE-2026-16729.
osv.devquote checked
- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?