Skip to content

[Snyk] Upgrade undici from 4.12.0 to 7.18.2#276

Open
nerdy-tech-com-gitub wants to merge 1 commit intomainfrom
snyk-upgrade-aa7cb5bbc1e06a08e3f82c9e295f3410
Open

[Snyk] Upgrade undici from 4.12.0 to 7.18.2#276
nerdy-tech-com-gitub wants to merge 1 commit intomainfrom
snyk-upgrade-aa7cb5bbc1e06a08e3f82c9e295f3410

Conversation

@nerdy-tech-com-gitub
Copy link
Copy Markdown
Owner

@nerdy-tech-com-gitub nerdy-tech-com-gitub commented Feb 8, 2026

snyk-top-banner

Snyk has created this PR to upgrade undici from 4.12.0 to 7.18.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 157 versions ahead of your current version.

  • The recommended version was released a month ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Remote Code Execution (RCE)
SNYK-JS-SHELLQUOTE-1766506		 177 No Known Exploit
high severity Improper Link Resolution Before File Access ('Link Following')
SNYK-JS-TARFS-10293725		 177 No Known Exploit
high severity Symlink Attack
SNYK-JS-TARFS-9535930		 177 Mature
high severity Insecure Randomness
SNYK-JS-UNDICI-8641354		 177 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-UNDICI-3323845		 177 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908		 177 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908		 177 Proof of Concept
high severity Insecure Randomness
SNYK-JS-UNDICI-8641354		 177 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-WS-7266574		 177 Proof of Concept
high severity Asymmetric Resource Consumption (Amplification)
SNYK-JS-BODYPARSER-7926860		 177 No Known Exploit
high severity Excessive Platform Resource Consumption within a Loop
SNYK-JS-BRACES-6838727		 177 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-DECODEURICOMPONENT-3149970		 177 Proof of Concept
high severity Improper Handling of Extra Parameters
SNYK-JS-FOLLOWREDIRECTS-6141137		 177 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-GETFUNCNAME-5923417		 177 Proof of Concept
high severity Prototype Pollution
SNYK-JS-JSONSCHEMA-1920922		 177 No Known Exploit
high severity Prototype Poisoning
SNYK-JS-QS-3153490		 177 Proof of Concept
high severity Prototype Poisoning
SNYK-JS-QS-3153490		 177 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795		 177 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795		 177 Proof of Concept
medium severity Symlink Following
SNYK-JS-TARFS-13045213		 177 No Known Exploit
medium severity Symlink Attack
SNYK-JS-TMP-11501554		 177 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-UAPARSERJS-3244450		 177 Proof of Concept
medium severity Improper Certificate Validation
SNYK-JS-UNDICI-2928996		 177 Proof of Concept
medium severity CRLF Injection
SNYK-JS-UNDICI-2953389		 177 Proof of Concept
medium severity CRLF Injection
SNYK-JS-UNDICI-2980276		 177 No Known Exploit
medium severity Server-side Request Forgery (SSRF)
SNYK-JS-UNDICI-2980286		 177 No Known Exploit
medium severity CRLF Injection
SNYK-JS-UNDICI-3323844		 177 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BABELHELPERS-9397697		 177 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BABELRUNTIME-10044504		 177 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-COOKIE-8163060		 177 No Known Exploit
medium severity Improper Control of Dynamically-Managed Code Resources
SNYK-JS-EJS-6689533		 177 Proof of Concept
medium severity Information Exposure
SNYK-JS-FOLLOWREDIRECTS-2332181		 177 Proof of Concept
medium severity Information Exposure
SNYK-JS-FOLLOWREDIRECTS-6444610		 177 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3042992		 177 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3105943		 177 No Known Exploit
medium severity Prototype Pollution
SNYK-JS-LODASH-15053838		 177 No Known Exploit
medium severity Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728		 177 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-3050818		 177 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-OCTOKITENDPOINT-8730856		 177 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-OCTOKITPLUGINPAGINATEREST-8730855		 177 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-OCTOKITREQUEST-8730853		 177 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-OCTOKITREQUESTERROR-8730854		 177 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHTOREGEXP-7925106		 177 Proof of Concept
medium severity Improper Input Validation
SNYK-JS-POSTCSS-5926692		 177 No Known Exploit
medium severity Cross-site Scripting (XSS)
SNYK-JS-ROLLUP-8073097		 177 Proof of Concept
low severity Missing Release of Memory after Effective Lifetime
SNYK-JS-UNDICI-10176064		 177 Proof of Concept
low severity Missing Release of Memory after Effective Lifetime
SNYK-JS-UNDICI-10176064		 177 Proof of Concept
low severity Information Exposure
SNYK-JS-UNDICI-2957529		 177 Proof of Concept
low severity Information Exposure
SNYK-JS-UNDICI-5962466		 177 No Known Exploit
low severity Permissive Cross-domain Policy with Untrusted Domains
SNYK-JS-UNDICI-6252336		 177 No Known Exploit
low severity Improper Access Control
SNYK-JS-UNDICI-6564963		 177 No Known Exploit
low severity Improper Authorization
SNYK-JS-UNDICI-6564964		 177 No Known Exploit
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BRACEEXPANSION-9789073		 177 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BRACEEXPANSION-9789073		 177 Proof of Concept
low severity Information Exposure
SNYK-JS-FOLLOWREDIRECTS-2396346		 177 No Known Exploit
low severity Prototype Pollution
SNYK-JS-MINIMIST-2429795		 177 Proof of Concept
Release notes
Package name: undici

@snyk-bot
feat: upgrade undici from 4.12.0 to 7.18.2
8108337 
Snyk has created this PR to upgrade undici from 4.12.0 to 7.18.2.

See this package in npm:
undici

See this project in Snyk:
https://app.snyk.io/org/nerds-github/project/bf4e0bbc-6133-4196-a6ba-f683223a4e51?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@nerdy-tech-com-gitub @snyk-bot