Skip to content

Commit ef467ec

Browse files
Fix security issue in undici via minor version upgrade from 6.21.1 to 6.21.2 (#121)
This PR will resolve the following CVEs: | CVE ID | Severity | Description | | --- | --- | --- | | <pre>[CVE-2025-47279](https://app.aikido.dev/issues/8965057/detail?groupId=324#CVE-2025-47279)</pre> | <pre>LOW</pre> | ### Impact<br><br>Applications that use undici to implement a webhook-like system are vulnerable. If the attacker set up a server with an invalid certificate, and they can force the application to call the webhook repeatedly, then they can cause a memory leak. <br><br>### Patches<br><br>This has been patched in https... | ## Summary by Sourcery Bug Fixes: - Upgrade undici from 6.21.1 to 6.21.2 to fix a memory leak vulnerability (CVE-2025-47279) Co-authored-by: aikido-autofix[bot] <119856028+aikido-autofix[bot]@users.noreply.github.com>
1 parent b593f57 commit ef467ec

2 files changed

Lines changed: 7 additions & 8 deletions

File tree

package-lock.json

Lines changed: 6 additions & 7 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -83,6 +83,6 @@
8383
"ultracite": "^4.1.15"
8484
},
8585
"overrides": {
86-
"undici@<=6.21.1": "6.21.1"
86+
"undici@<=6.21.2": "6.21.2"
8787
}
8888
}

0 commit comments

Comments
 (0)