does not show broad vault access or confirmed outbound data sending beyond those retrieval requests.","dependencyVulnerabilities":[{"packageName":"undici","packageVersion":">=7.23.0 <7.28.0","severity":"high","title":"undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent","advisoryUrl":"https://github.com/advisories/GHSA-vmh5-mc38-953g","ghsaId":"GHSA-vmh5-mc38-953g","cveId":null,"vulnerableRange":">=7.23.0 <7.28.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"undici","packageVersion":">=7.0.0 <7.28.0","severity":"moderate","title":"undici vulnerable to HTTP header injection via Set-Cookie percent-decoding","advisoryUrl":"https://github.com/advisories/GHSA-p88m-4jfj-68fv","ghsaId":"GHSA-p88m-4jfj-68fv","cveId":null,"vulnerableRange":">=7.0.0 <7.28.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"undici","packageVersion":">=7.0.0 <7.28.0","severity":"high","title":"undici WebSocket client vulnerable to denial of service via fragment count bypass","advisoryUrl":"https://github.com/advisories/GHSA-vxpw-j846-p89q","ghsaId":"GHSA-vxpw-j846-p89q","cveId":null,"vulnerableRange":">=7.0.0 <7.28.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"undici","packageVersion":">=7.23.0 <7.28.0","severity":"high","title":"undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse","advisoryUrl":"https://github.com/advisories/GHSA-hm92-r4w5-c3mj","ghsaId":"GHSA-hm92-r4w5-c3mj","cveId":null,"vulnerableRange":">=7.23.0 <7.28.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"undici","packageVersion":">=7.0.0 <7.28.0","severity":"low","title":"undici vulnerable to HTTP response queue poisoning via keep-alive socket reuse","advisoryUrl":"https://github.com/advisories/GHSA-35p6-xmwp-9g52","ghsaId":"GHSA-35p6-xmwp-9g52","cveId":null,"vulnerableRange":">=7.0.0 <7.28.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"undici","packageVersion":">=7.0.0 <7.28.0","severity":"low","title":"undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching","advisoryUrl":"https://github.com/advisories/GHSA-g8m3-5g58-fq7m","ghsaId":"GHSA-g8m3-5g58-fq7m","cveId":null,"vulnerableRange":">=7.0.0 <7.28.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"undici","packageVersion":">=7.0.0 <7.28.0","severity":"moderate","title":"undici vulnerable to cross-user information disclosure via shared cache whitespace bypass","advisoryUrl":"https://github.com/advisories/GHSA-pr7r-676h-xcf6","ghsaId":"GHSA-pr7r-676h-xcf6","cveId":null,"vulnerableRange":">=7.0.0 <7.28.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"undici","packageVersion":">=7.0.0 <7.29.0","severity":"moderate","title":"undici vulnerable to downstream response desynchronization via retry interceptor","advisoryUrl":"https://github.com/advisories/GHSA-8xcm-r25x-g524","ghsaId":"GHSA-8xcm-r25x-g524","cveId":null,"vulnerableRange":">=7.0.0 <7.29.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"undici","packageVersion":">=7.0.0 <7.29.0","severity":"high","title":"undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives","advisoryUrl":"https://github.com/advisories/GHSA-4cwx-7wf7-3272","ghsaId":"GHSA-4cwx-7wf7-3272","cveId":null,"vulnerableRange":">=7.0.0 <7.29.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"undici","packageVersion":">=7.0.0 <7.29.0","severity":"moderate","title":"undici vulnerable to CRLF Injection via blob-like body 'type' property","advisoryUrl":"https://github.com/advisories/GHSA-m8rv-5g2x-5cg5","ghsaId":"GHSA-m8rv-5g2x-5cg5","cveId":null,"vulnerableRange":">=7.0.0 <7.29.0","fixAvailable":null,"source":"npm-audit","isDirect":false,"path":null},{"packageName":"undici","packageVersion":

Wechat Capture