Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

Version 13.0.0's undici dependency has a CVE out #3337

Copy link
Copy link

Description

@zsharpBDO
Issue body actions

The released version of node-gyp v13.0.0 uses undici ^6.25.0, which is affected by CVE-2026-11525. PR #3330 brings it to ^8.4.1 (resolves to 8.5.0), which includes a fix for the CVE. Please make a new release with the updated undici version to ensure this package isn't causing dependency issues.

Reactions are currently unavailable

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions

Morty Proxy This is a proxified and sanitized view of the page, visit original site.