Threats tagged 'ghsa-9qxr-qj54-h672'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	2.6	EPSS 0.8%	CVE-2024-30261Undici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect Low2.6EPSS 0.8%2024-04-04GCVE DatabaseCVE-2024-30261 Undici's fetch implementation has a vulnerability in its integrity option handling. When the integrity option is specified with an algorithm but an incorrect hash value, fetch may incorrectly accept tampered requests. This flaw allows an attacker who can alter the integrity option to bypass integrity checks. The issue is fixed in versions 5.28.4 and 6.11.1. EPSS 0.8%Report on CVE-2024-30261 Vulnerability CWE-284 #ghsa-9qxr-qj54-h672 #npm	GCVE Database	2024-04-04

Page 1 of 1