KhafraDev

undici vulnerable to Denial of Service via unbounded memory in the EventSource parser

undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens

undici vulnerable to HTTP header injection via Set-Cookie percent-decoding

undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching