CVE-2026-16728 | nodejs undici up to 6.27.x/7.28.x/8.8.x Retry Interceptor improper synchronization

A vulnerability, which was classified as critical, has been found in nodejs undici up to 6.27.x/7.28.x/8.8.x. This affects an unknown part of the component Retry Interceptor. The manipulation leads to improper synchronization.

This vulnerability is uniquely identified as CVE-2026-16728. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More