Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Vulnerability CVE-2025-22150 in the undici dependency #1197

Closed
baraknaveh opened this issue Jan 23, 2025 · 3 comments
Closed

Vulnerability CVE-2025-22150 in the undici dependency #1197

baraknaveh opened this issue Jan 23, 2025 · 3 comments

Comments

@baraknaveh
Copy link

There is a vulnerability in the undici version used. Details at: https://nvd.nist.gov/vuln/detail/CVE-2025-22150.

Would you kindly update it from v6.21.0 to 6.21.1? or better, to ^6.21.1 so issues like this will not be necessary?

Thanks!

@webpro
Copy link
Collaborator

webpro commented Jan 24, 2025

Thanks the for the report!

so issues like this will not be necessary

Bugs can be fixed but also introduced in next patch updates, so this isn't a silver bullet :)

@webpro webpro closed this as completed in 260116b Jan 24, 2025
@webpro
Copy link
Collaborator

webpro commented Jan 24, 2025

🚀 This issue has been resolved in v18.1.2. See Release 18.1.2 for release notes.

@baraknaveh
Copy link
Author

@webpro thanks for addressing!

Bugs can be fixed but also introduced in next patch updates, so this isn't a silver bullet :)

True :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants