SUSE-SU-2024:1836-1
Not scored
Security update for nodejs16
This update for nodejs16 fixes the following issues: - CVE-2024-30260: undici: proxy-authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline (bsc#1222530) - CVE-2024-30261: undici: Ensure that integrity cannot be tampered with (bsc#1222603)
Exploit probability
Not scored
Published
May 29, 2024
Required by
Not available
Last source change
February 4, 2026
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
SUSE-SU-2024:1836-1
View original source
This update for nodejs16 fixes the following issues: - CVE-2024-30260: undici: proxy-authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline (bsc#1222530) - CVE-2024-30261: undici: Ensure that integrity cannot be tampered with (bsc#1222603)
05 / REFERENCES