mcollina

undici vulnerable to cross-user information disclosure via cross-origin redirect revalidation

undici vulnerable to cross-origin credential disclosure via array-of-tuples headers bypassing redirect stripping

undici vulnerable to Subresource Integrity bypass via whitespace in integrity metadata

undici vulnerable to cache poisoning and cross-user disclosure via intermediate redirect hops

undici vulnerable to Denial of Service via unhandled exception in cache-interceptor response replay

undici vulnerable to cross-user cache disclosure via same-origin redirect

@fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targets

@fastify/session vulnerable to session revocation bypass via a logout race condition

@fastify/http-proxy vulnerable to prefix escape via percent-encoded backslash dot-segments

@fastify/http-proxy vulnerable to prefix escape via decoded route parameters