CyberICT

CVE-2026-15157

Microsoft · Published August 7, 2026

CVSS v3.1

MEDIUM
Patch availableGet patch

Description

undici vulnerable to CRLF Injection via blob-like body 'type' property. undici vulnerable to CRLF Injection via blob-like body 'type' property

Affected Products

  • azl3 nodejs 24.18.1-1 on Azure Linux 3.0

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N