Change8
Symbol13 releases

undici

Found in 3 packages: payload-cms, node-js, cloudflare-workers

payload-cms(1 releases)

node-js(8 releases)

v26.5.1
Jul 29, 2026

This is a security release addressing multiple vulnerabilities across various modules including http2, permission, https, sqlite, dns, zlib, and http. It also includes dependency updates for llhttp and undici.

v22.23.2
Jul 29, 2026

This is a security release that addresses several vulnerabilities across http2, permission, https, dns, zlib, and http modules. It also includes dependency updates for llhttp and undici.

v22.23.0Breaking
Jun 18, 2026

This is a security release addressing multiple high and medium severity CVEs across TLS, crypto, HTTP/2, and DNS modules. It also includes dependency updates and removes deprecated http2 priority signaling.

v20.19.6
Nov 25, 2025

This release focuses on security updates including root certificate renewals and OpenSSL 3.0.17, alongside the deprecation of HTTP/2 priority signaling and various dependency bumps.

v18.20.8
Mar 27, 2025

This release focuses on security and dependency updates, notably upgrading OpenSSL to 3.0.16 and root certificates to NSS 3.108, alongside internal improvements to the inspector API.

v18.20.6
Jan 21, 2025

This security release addresses three medium-severity vulnerabilities (CVE-2025-23085, CVE-2025-23084, CVE-2025-22150) involving HTTP2 memory leaks, Windows path traversal, and undici fetch randomness.

v20.18.2Breaking
Jan 21, 2025

This security release addresses several vulnerabilities including a high-severity issue in the Permission Model, path traversal on Windows, and memory leaks in HTTP/2.

v22.13.1Breaking
Jan 21, 2025

This security release addresses critical vulnerabilities including a path traversal on Windows, an HTTP/2 memory leak, and unauthorized InternalWorker access when the permission model is active.

cloudflare-workers(4 releases)

Track Symbol Changes

Use the Change8 MCP server or GitHub Action to get notified when undici changes.

Learn More