undici

A developer at Workstyle Tech documented how Next.js API routes proxying requests to a FastAPI inference service returned 502 errors during long-running audio generation because the global fetch (undi…

CrawlForge MCP Server v5.0.0 addresses a critical SSRF vulnerability that allowed IP-literal URLs to bypass hostname-based guards, potentially exposing loopback, link-local, and cloud metadata endpoin…

LangSmith version 0.3.79 contains 5 CVEs, including a 9.8 severity request smuggling vulnerability in the undici HTTP client. The flaw allows attackers to inject malicious headers, potentially comprom…