Public scan · 2026-05-01
nodejs/undici
An HTTP/1.1 client, written from scratch for Node.js
- client
- http
- nodejs
Files scanned
682
Shor-vulnerable
0
RSA / ECC / Ed* / X25519
Grover-weakened
20
AES-128 / SHA-1 / MD5
Total occurrences
20
Breakdown by primitive
- MD5 (broken, replace with SHA-256) 19
- SHA-1 (broken, replace with SHA-256) 1
Findings
download CycloneDX 1.6 CBOM → lib/web/websocket/connection.js open ↗
-
// base64-encoded SHA-1 of the concatenation of the |Sec-WebSocket-
test/client-request.js open ↗
-
res.writeHead(200, { Trailer: 'Content-MD5' }) -
res.addTrailers({ 'Content-MD5': 'test' })
test/client-stream.js open ↗
-
res.writeHead(200, { Trailer: 'Content-MD5' }) -
res.addTrailers({ 'Content-MD5': 'test' })
test/jest/mock-agent.test.js open ↗
-
trailers: { 'Content-MD5': 'test' }
test/mock-agent.js open ↗
-
trailers: { 'Content-MD5': 'test' } -
trailers: { 'Content-MD5': 'test' } -
trailers: { 'Content-MD5': 'test' } -
trailers: { 'Content-MD5': 'test' } -
trailers: { 'Content-MD5': 'test' } -
trailers: { 'Content-MD5': 'test' } -
trailers: { 'Content-MD5': 'test' } -
trailers: { 'Content-MD5': 'test' } -
trailers: { 'Content-MD5': 'test' }
test/mock-client.js open ↗
-
trailers: { 'Content-MD5': 'test' }
test/mock-pool.js open ↗
-
trailers: { 'Content-MD5': 'test' }
test/node-test/client-dispatch.js open ↗
-
res.addTrailers({ 'Content-MD5': 'test' }) -
res.setHeader('Trailer', 'Content-MD5') -
const contentMD5Idx = rawTrailers.findIndex(x => x.toString() === 'Content-MD5')