Skip to content

[Snyk] Upgrade undici from 5.28.4 to 7.2.0#20

Open
snyk-io[bot] wants to merge 1 commit into
mainfrom
snyk-upgrade-6941e9a16bee227e1d373fbc020bc188
Open

[Snyk] Upgrade undici from 5.28.4 to 7.2.0#20
snyk-io[bot] wants to merge 1 commit into
mainfrom
snyk-upgrade-6941e9a16bee227e1d373fbc020bc188

Conversation

@snyk-io
Copy link
Copy Markdown
Contributor

@snyk-io snyk-io Bot commented Jan 29, 2025

snyk-top-banner

Snyk has created this PR to upgrade undici from 5.28.4 to 7.2.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

  • The recommended version is 59 versions ahead of your current version.

  • The recommended version was released a month ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-CROSSSPAWN-8303230		 169 Proof of Concept
high severity Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728		 169 No Known Exploit
medium severity Improper Input Validation
SNYK-JS-NANOID-8492085		 169 No Known Exploit
medium severity Cross-site Scripting (XSS)
SNYK-JS-ROLLUP-8073097		 169 Proof of Concept
medium severity Information Exposure
SNYK-JS-VITE-8023174		 169 Proof of Concept
low severity Cross-site Scripting (XSS)
SNYK-JS-VITE-8022916		 169 Proof of Concept
Release notes
Package name: undici

@semanticdiff-com
Copy link
Copy Markdown

semanticdiff-com Bot commented Jan 29, 2025 •
edited
Loading

Review changes with  SemanticDiff

Changed Files
File Status
  package.json  37% smaller

@snyk-io
Copy link
Copy Markdown
Contributor Author

snyk-io Bot commented Jan 29, 2025

🎉 Snyk checks have passed. No issues have been found so far.

✅ security/snyk check is complete. No issues have been found. (View Details)

@hashim21223445 hashim21223445 self-requested a review October 14, 2025 18:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@hashim21223445 hashim21223445 hashim21223445 approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@hashim21223445