Node.Js · Undici · CVE-2024-38372
**Name of the Vulnerable Software and Affected Versions**
Undici versions prior to 6.19.2
**Description**
Undici is an HTTP/1.1 client, written from scratch for Node.js. Depending on network and process conditions of a `fetch()` request, `response.arrayBuffer()` might include a portion of memory from the Node.js process.
**Recommendations**
For versions prior to 6.19.2, update to version 6.19.2 to resolve the issue. As a temporary workaround, consider avoiding the use of `response.arrayBuffer()` in `fetch()` requests until the update is applied.