undici vulnerable to cross-origin credential disclosure via array-of-tuples headers bypassing redirect stripping

The publication date reported by the vendor.

The vendor changed the advisory after it was first published.

We collected the advisory from the official source.