## undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation

- 種別: advisory
- 重大度: high
- 関連技術: nodejs
- CVE: CVE-2026-87018
- 公開日時: 2026-10-27T19:02:21.000Z
- 情報源: GitHub Advisory Database (https://github.com/advisories/GHSA-qrxm-fqhp-jwvm)
- パーマリンク: https://vulnpulse.app/items/ghsa-ghsa-qrxm-fqhp-jwvm

影響: npm:undici >= 4.2.1, < 6.29.1 → 6.29.1, npm:undici >= 7.0.0, < 7.30.1 → 7.30.1, npm:undici >= 8.0.0, < 8.12.2 → 8.12.2
undici crashes the client process when a TLS 1.2 server renegotiates after the connection is established and presents a different, CA-trusted certificate whose hostname does not match the requested host. Node.js re-runs hostname verification on the renegotiated handshake and destroys the socket with ERR_TLS_CERT_ALTNAME_INVALID. undici's established socket error handler asserted that this error code could never occur, so the peer-controlled error became an uncaught AssertionError that terminate…