Known Vulnerabilities for Node-fetch by Node-fetch Project
Listed below are 3 of the newest known vulnerabilities associated with "Node-fetch" by "Node-fetch Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-109869 json | undici is an HTTP client library for Node.js. In versions 6.23.0 through 6.29.0, 7.18.0 through 7.30.0, and 8.0.0 through 8.1... | Not Provided | 2026-10-15 | 2026-10-16 |
| CVE-2026-109841 json | undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its fetch() impleme... | Not Provided | 2026-10-15 | 2026-10-16 |
| CVE-2026-109383 json | undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.... | Not Provided | 2026-10-15 | 2026-10-16 |
| CVE-2026-103757 json | Budibase through 3.41.0 contains a server-side request forgery vulnerability in AI table generation because the uploadUrl fun... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-101908 json | Axios is a promise-based HTTP client for the browser and Node.js. From 1.7.0 until 1.20.0, the fetch adapter constructs a Req... | Not Provided | 2026-09-28 | 2026-09-28 |
| CVE-2026-101907 json | Axios is a promise-based HTTP client for the browser and Node.js. From 1.17.0 until 1.20.0, the fetch adapter bypasses the ma... | Not Provided | 2026-09-28 | 2026-09-28 |
| CVE-2026-101900 json | Axios is a promise-based HTTP client for the browser and Node.js. From 1.12.0 until 1.20.0, ResolveConfig reads inherited Sym... | Not Provided | 2026-09-28 | 2026-09-28 |
| CVE-2026-92587 json | n8n is a workflow automation platform. In versions before 1.123.76, 2.37.7, and 2.38.2, the Git node validated a relative rem... | Not Provided | 2026-09-16 | 2026-09-21 |
| CVE-2026-89809 json | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix scope of mqd_mgr dereference in pqm_debu... | Not Provided | 2026-09-16 | 2026-10-19 |
| CVE-2026-87018 json | undici is an HTTP client library for Node.js. In versions 4.2.1 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.... | Not Provided | 2026-10-15 | 2026-10-16 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Node-fetch Project | Node-fetch | 3.0.0 | |||
| Application | Node-fetch Project | Node-fetch | 3.0.0 | |||
| Application | Node-fetch Project | Node-fetch | 3.0.0 | |||
| Application | Node-fetch Project | Node-fetch | 3.0.0 | |||
| Application | Node-fetch Project | Node-fetch | 3.0.0 | |||
| Application | Node-fetch Project | Node-fetch | 3.0.0 | |||
| Application | Node-fetch Project | Node-fetch | 2.6.1 | |||
| Application | Node-fetch Project | Node-fetch | 2.6.0 | |||
| Application | Node-fetch Project | Node-fetch | 2.5.0 | |||
| Application | Node-fetch Project | Node-fetch | 2.4.1 | |||
| Application | Node-fetch Project | Node-fetch | 2.4.0 | |||
| Application | Node-fetch Project | Node-fetch | 2.3.0 | |||
| Application | Node-fetch Project | Node-fetch | 2.2.1 | |||
| Application | Node-fetch Project | Node-fetch | 2.2.0 | |||
| Application | Node-fetch Project | Node-fetch | 2.1.2 | |||
| Application | Node-fetch Project | Node-fetch | 2.1.1 | |||
| Application | Node-fetch Project | Node-fetch | 2.1.0 | |||
| Application | Node-fetch Project | Node-fetch | 2.0.0 | |||
| Application | Node-fetch Project | Node-fetch | 2.0.0 | |||
| Application | Node-fetch Project | Node-fetch | 2.0.0 |