CVE-2026-84890 | Undici up to 7.29.0/8.10.1 Decompress Interceptor resource consumption

A vulnerability described as problematic has been identified in Undici up to 7.29.0/8.10.1. This affects an unknown function of the component Decompress Interceptor. Such manipulation leads to resource consumption.

This vulnerability is referenced as CVE-2026-84890. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More