Packages / undici / Security

LowVulnerabilityGHSA-cxrh-j4jr-qwg3Published 15 May 2025

undici Denial of Service attack via bad certificate data

Affected · undici

  • < 5.29.0
  • >= 6.0.0, < 6.21.2
  • >= 7.0.0, < 7.5.0

Fixed in

7.5.0

npm install undici@7.5.0

  1. Affected

    0.1.0 – 5.28.5

    151 releases

  2. Fixed

    5.29.0

    1 release

  3. Affected

    6.0.0 – 6.21.1

    44 releases

  4. Fixed

    6.21.2 – 6.29.1

    13 releases

  5. Affected

    7.0.0 – 7.4.0

    9 releases

  6. Fixed

    7.5.0 – 8.12.3

    66 releases, latest

284 stable releases of undici, oldest to newest.

What happens

The full text is not stored yet. Read it on osv.dev.