{"action":"Upgrade undici to 6.29.1 (6.x), 7.30.1 (7.x) or 8.12.2 (8.x) or later.","affected":[{"fixed":"6.29.1","introduced":"6.23.0"},{"fixed":"7.30.1","introduced":"7.18.0"},{"fixed":"8.12.2","introduced":"8.0.0"}],"component":"undici","cve_ids":["CVE-2026-109869"],"ecosystem":"npm","exploited":false,"fixed_versions":["6.29.1","7.30.1","8.12.2"],"ghsa_id":"GHSA-xjj6-f33q-929c","id":"tcs_01M5NFY91SEK8W8C9Z14QFK4S1","modified_at":"2026-10-23T22:30:05.007687918Z","published_at":"2026-10-23T22:14:31Z","references":["https://osv.dev/vulnerability/GHSA-xjj6-f33q-929c","https://github.com/nodejs/undici/security/advisories/GHSA-xjj6-f33q-929c","https://nvd.nist.gov/vuln/detail/CVE-2026-109869","https://github.com/nodejs/undici/commit/07ded4941b1e72afec862958c3b8ddf468f3b429","https://github.com/nodejs/undici/commit/1325a87dfb3492f8e87e6b0a84b3bda4e82e3436","https://github.com/nodejs/undici/commit/b5084c7dc239172d75c336b1cd51ddac023938a5","https://cna.openjsf.org/security-advisories.html","https://github.com/nodejs/undici","https://github.com/nodejs/undici/releases/tag/v6.29.1","https://github.com/nodejs/undici/releases/tag/v7.30.1","https://github.com/nodejs/undici/releases/tag/v8.12.2"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-xjj6-f33q-929c","url":"https://osv.dev/vulnerability/GHSA-xjj6-f33q-929c"}],"summary":"undici vulnerable to Denial of Service via unhandled error on excessive content-encodings"}