CVE:CVE-2023-23936
CNNVD:CNNVD-202302-1436
undici是一个HTTP/1.1客户端。
undici 2.0.0版本至5.19.1之前版本存在安全漏洞，该漏洞源于容易受到CRLF注入漏洞的影响。
solution:Upgrade nodejs node.js to a higher version than 16.19.1,18.14.1,19.6.1,and avoid the version [16.0.0,16.19.1),[18.0.0,18.14.1),[19.0.0,19.6.1); Upgrade nodejs undici to a higher version than 5.19.1,and avoid the version [2.0.0,5.19.1)