StackPatch is live — CVE patch ops for indie SaaS, $99 lifetime founder seat (50 only).See product

Back to CVE digest

Package · node-undici

`node-undici` CVE matrix across Linux distros

20 CVEs tracked across 2 distro releases. Showing the 20 most-recent fix records.

Ecosystems with tracked fixes

Debian bookwormDebian trixie

Recent fix records

Each row links to the full per-CVE cross-distro view. Sorted most-recent first.

Debian bookworm

Source: Debian

CVE-2022-31150→ fixed in5.8.0+dfsg1+~cs18.9.16-1
CVE-2022-31151→ fixed in5.8.0+dfsg1+~cs18.9.16-1
CVE-2022-32210→ fixed in5.6.1+dfsg1+~cs18.9.16-1
CVE-2022-35948→ fixed in5.8.2+dfsg1+~cs18.9.18.1-1
CVE-2022-35949→ fixed in5.8.2+dfsg1+~cs18.9.18.1-1
CVE-2023-23936→ fixed in5.15.0+dfsg1+~cs20.10.9.3-1+deb12u1
CVE-2023-24807→ fixed in5.15.0+dfsg1+~cs20.10.9.3-1+deb12u1
CVE-2023-45143→ fixed in5.15.0+dfsg1+~cs20.10.9.3-1+deb12u2

Single command to patch all of these:

sudo apt-get install --only-upgrade -y node-undici

Debian trixie

Source: Debian

CVE-2022-31150→ fixed in5.8.0+dfsg1+~cs18.9.16-1
CVE-2022-31151→ fixed in5.8.0+dfsg1+~cs18.9.16-1
CVE-2022-32210→ fixed in5.6.1+dfsg1+~cs18.9.16-1
CVE-2022-35948→ fixed in5.8.2+dfsg1+~cs18.9.18.1-1
CVE-2022-35949→ fixed in5.8.2+dfsg1+~cs18.9.18.1-1
CVE-2023-23936→ fixed in5.19.1+dfsg1+~cs20.10.9.5-1
CVE-2023-24807→ fixed in5.19.1+dfsg1+~cs20.10.9.5-1
CVE-2023-45143→ fixed in5.26.3+dfsg1+~cs23.10.12-1
+4 more in Debian trixie

Single command to patch all of these:

sudo apt-get install --only-upgrade -y node-undici

Is YOUR node-undici patched?

5-second check on your actual server. The quickscan reads your installed node-undici version and matches against the same 20-CVE catalog above.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Continuous monitoring ($99 lifetime)