{"id":"ghsa-ghsa-qrxm-fqhp-jwvm","seq":1708762,"kind":"advisory","title":"undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation","url":"https://github.com/advisories/GHSA-qrxm-fqhp-jwvm","permalink":"https://vulnpulse.app/items/ghsa-ghsa-qrxm-fqhp-jwvm","summary":"影響: npm:undici >= 4.2.1, < 6.29.1 → 6.29.1, npm:undici >= 7.0.0, < 7.30.1 → 7.30.1, npm:undici >= 8.0.0, < 8.12.2 → 8.12.2\nundici crashes the client process when a TLS 1.2 server renegotiates after the connection is established and presents a different, CA-trusted certificate whose hostname does not match the requested host. Node.js re-runs hostname verification on the renegotiated handshake and destroys the socket with ERR_TLS_CERT_ALTNAME_INVALID. undici's established socket error handler asserted that this error code could never occur, so the peer-controlled error became an uncaught AssertionError that terminate…","severity":"high","techs":["nodejs"],"cves":["CVE-2026-87018"],"tags":["GHSA-qrxm-fqhp-jwvm","undici","undici","undici"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-27T19:02:21.000Z","fetched_at":"2026-10-27T21:03:52.214Z"}