Ulises Gascón

undici is vulnerable to Unbounded Memory Consumption in undici WebSocket permessage-deflate Decompression

undici is vulnerable to Unhandled Exception in undici WebSocket Client Due to Invalid server_max_window_bits Validation

Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions

undici is vulnerable to Malicious WebSocket 64-bit length overflows undici parser and crashes the client

fast-uri vulnerable to path traversal via percent-encoded dot segments

fast-uri vulnerable to host confusion via percent-encoded authority delimiters

Multer vulnerable to Denial of Service via uncontrolled recursion

morgan vulnerable to Log Forging via unneutralized control characters in :remote-user

webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins

multiparty vulnerable to ReDoS via filename parsing