Packages / undici / Security

HighVulnerabilityGHSA-hm92-r4w5-c3mjPublished 19 Jun 2026

undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse

Affected · undici

  • >= 7.23.0, < 7.28.0
  • >= 8.0.0, < 8.2.0

Fixed in

8.2.0

npm install undici@8.2.0

  1. Not affected

    0.1.0 – 7.22.0

    240 releases

  2. Affected

    7.23.0 – 7.27.2

    15 releases

  3. Fixed

    7.28.0 – 7.30.1

    5 releases

  4. Affected

    8.0.0 – 8.1.0

    5 releases

  5. Fixed

    8.2.0 – 8.12.3

    19 releases, latest

284 stable releases of undici, oldest to newest.

What happens

The full text is not stored yet. Read it on osv.dev.