A vulnerability labeled as problematic has been found in undici. Affected by this issue is the function
isValidClientWindowBits. Such manipulation leads to uncaught exception.
This vulnerability is referenced as CVE-2026-2229. It is possible to launch the attack remotely. No exploit is available.
The affected component should be upgraded.