Skip to content

SECVULN-47057: resolve GHSA-p88m-4jfj-68fv and GHSA-vxpw-j846-p89q - #72

Merged
ryancragun merged 1 commit into
mainfrom
ryan/SECVULN-47057
Aug 7, 2026
Merged

SECVULN-47057: resolve GHSA-p88m-4jfj-68fv and GHSA-vxpw-j846-p89q#72
ryancragun merged 1 commit into
mainfrom
ryan/SECVULN-47057

Conversation

@ryancragun

Copy link
Copy Markdown
Contributor

How to read this pull request

Resolve GHSA-p88m-4jfj-68fv and GHSA-vxpw-j846-p89q by updating undici. We also update a few other deps that showed up in the npm audit.

I also added a very restrictive minimum age to our NPM deps so that we can very intentionally update them going forward.

Checklist

  • The commit message includes an explanation of the changes
  • Manual validation of the changes have been performed (if possible)
  • New or modified code has requisite test coverage (if possible)
  • I have performed a self-review of the changes
  • I have made necessary changes and/or pull requests for documentation
  • I have written useful comments in the code

PCI review checklist

  • I have documented a clear reason for, and description of, the change I am making.
  • If applicable, I've documented a plan to revert these changes if they require more than reverting the pull request.
  • If applicable, I've documented the impact of any changes to security controls.

Signed-off-by: Ryan Cragun <me@ryan.ec>
@ryancragun
ryancragun requested a review from a team as a code owner August 6, 2026 23:27
@ryancragun
ryancragun requested review from ej-hashi and tvo0813 August 6, 2026 23:27
@ryancragun
ryancragun merged commit 9b6eef8 into main Aug 7, 2026
8 checks passed
@ryancragun
ryancragun deleted the ryan/SECVULN-47057 branch August 7, 2026 17:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants