mcollina

fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization

@fastify/oauth2 vulnerable to Login CSRF via OAuth state cookie not cleared after callback

undici vulnerable to Denial of Service via unhandled error on excessive content-encodings

undici vulnerable to Denial of Service via unbounded memory in the EventSource parser

undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens

undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects

undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent

undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation

undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering

undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor