Skip to content

Fix undici cache control parsing - #599

Closed
bcorfman wants to merge 1 commit into
mainfrom
agent/security-undici-cache-control-whitespace
Closed

Fix undici cache control parsing#599
bcorfman wants to merge 1 commit into
mainfrom
agent/security-undici-cache-control-whitespace

Conversation

@bcorfman

Copy link
Copy Markdown
Owner

Override undici to the 7.29.0 patched release. This addresses Dependabot alert #64 (cross-user disclosure from whitespace around equals in Cache-Control directives).

Validation: npm install --package-lock-only --ignore-scripts --no-audit --no-fund.

@bcorfman bcorfman closed this Aug 19, 2026
@bcorfman
bcorfman deleted the agent/security-undici-cache-control-whitespace branch August 19, 2026 18:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant