CVE-2026-109924

About vulnerability

Impact

undici’s EventSource client can be driven to exhaust process memory by a malicious or compromised Server-Sent Events peer. By sending millions of tiny completed data: fields with no blank event separator, or a single unfinished line split across many chunks, the parser retains a growing amount of per-field and per-chunk state. The byte-based maxEventSize and maxResponseSize limits do not bound that retained state, and maxResponseSize is enforced on the compressed body before decompression, so a small compressed response can expand into enough retained memory to terminate the process. The application only needs to maintain an EventSource connection to an untrusted peer, which controls only the response. Availability is the only impact.

Patches

Upgrade to 6.29.1, 7.30.1, or 8.12.2, which bound the retained EventSource parser state (the number of data fields and buffered chunks, the unfinished-line length, and per-field byte totals) independently of the byte limits.

Workarounds

None.

Affected product:

@boxd-sh/sdk , @expo/build-tools , @expo/downloader , @expo/eas-build-job , @expo/steps , @expo/turtle-spawn , @keystonehq/ur-decoder , @sanity/media-library-types , @solana-program/stake , @taquito/local-forging , @taquito/michelson-encoder , @taquito/rpc , @taquito/signer , @taquito/tzip16 , @taquito/utils , AngularJS , ComposioHQ/composio , CopilotKit/CopilotKit , Fastify , MetaMask/accounts , Next.js , Node.js , NomicFoundation/hardhat , Protocol Buffers , React , RhysSullivan/executor , Vue , a2a-js , account-sdk , aegir , ag-ui , ag-ui-mastra , agent-browser , agents , agents-for-js , ai , ai-sdk-alibaba , ai-sdk-amazon-bedrock , ai-sdk-angular , ai-sdk-anthropic , ai-sdk-anthropic-aws , ai-sdk-assemblyai , ai-sdk-azure , ai-sdk-baseten , ai-sdk-black-forest-labs , ai-sdk-bytedance , ai-sdk-cartesia , ai-sdk-cerebras , ai-sdk-code-mode , ai-sdk-cohere , ai-sdk-deepgram , ai-sdk-deepinfra , ai-sdk-deepseek , ai-sdk-devtools , ai-sdk-elevenlabs , ai-sdk-fal , ai-sdk-fireworks , ai-sdk-fish-audio , ai-sdk-gateway , ai-sdk-gladia , ai-sdk-gmicloud , ai-sdk-google , ai-sdk-google-vertex , ai-sdk-groq , ai-sdk-harness , ai-sdk-harness-acp , ai-sdk-harness-claude-code , ai-sdk-harness-cline , ai-sdk-harness-codex , ai-sdk-harness-cursor , ai-sdk-harness-deepagents , ai-sdk-harness-fx , ai-sdk-harness-github-copilot , ai-sdk-harness-grok-build , ai-sdk-harness-opencode , ai-sdk-harness-pi , ai-sdk-huggingface , ai-sdk-hume , ai-sdk-klingai , ai-sdk-langchain , ai-sdk-llamaindex , ai-sdk-lmnt , ai-sdk-luma , ai-sdk-mcp , ai-sdk-minimax , ai-sdk-mistral , ai-sdk-moonshotai , ai-sdk-open-responses , ai-sdk-openai , ai-sdk-openai-compatible , ai-sdk-otel , ai-sdk-perplexity , ai-sdk-policy-opa , ai-sdk-prodia , ai-sdk-provider-claude-code , ai-sdk-provider-codex-cli , ai-sdk-provider-opencode-sdk , ai-sdk-provider-utils , ai-sdk-quiverai , ai-sdk-react , ai-sdk-replicate , ai-sdk-revai , ai-sdk-rsc , ai-sdk-sandbox-just-bash , ai-sdk-sandbox-vercel , ai-sdk-svelte , ai-sdk-togetherai , ai-sdk-topaz , ai-sdk-tui , ai-sdk-typesafe-ai , ai-sdk-valibot , ai-sdk-vercel , ai-sdk-voyage , ai-sdk-vue , ai-sdk-workflow , ai-sdk-workflow-harness , ai-sdk-xai , ai-sdk-zai , allure-codeceptjs , allure-js , analog , analogjs-storybook-angular , analogjs-vite-plugin-angular , angular-build , angular-create , angular-devkit-build-angular , angular-devkit-build-webpack , angular-eslint-builder , angular-platform-server , angular-pwa , apidevtools-json-schema-ref-parser , apollo-env , apollo-gateway , apollo-graphql , apollo-server , apollo-server-azure-functions , apollo-server-cloud-functions , apollo-server-cloudflare , apollo-server-core , apollo-server-express , apollo-server-fastify , apollo-server-integration-koa , apollo-server-koa , apollo-server-lambda , apollo-server-micro , apollo-server-testing , apollo-tooling , appium , appium-execute-driver-plugin , appkit , arcjet-js , arizeai-openinference-instrumentation-beeai , arizeai-openinference-vercel , assistant-cloud , assistant-ui , assistant-ui-ai-sdk , assistant-ui-eve , assistant-ui-react-ai-sdk , assistant-ui-react-native , astro , astro-expressive-code , astrojs-cloudflare , astrojs-markdoc , astrojs-mdx , astrojs-netlify , astrojs-node , astrojs-starlight , astrojs-svelte , astrojs-tailwind , astrojs-vercel , astrojs-vue , augment-vir-assert , augment-vir-test , aws-cdk , aws-crt-nodejs , aws-sdk-crc64-nvme-crt , aws-sdk-js-v3 , aws-sdk-signature-v4-crt , aws-xray-sdk , aws-xray-sdk-core , aws-xray-sdk-express , aws-xray-sdk-mysql , aws-xray-sdk-postgres , axe-core-npm , axe-core-webdriverio , axios-cookiejar-support , b4a , babel-jest , babel-loader , babel-plugin-remove-graphql-queries , babel-preset-expo , babel-preset-gatsby , bare-fs , bare-stream , beeai-framework , bl , blockchain-link-utils , blocknote , blocknote-server-util , blocknote-xl-ai , blocknote-xl-docx-exporter , blocks , blocks-editor , bluelovers-axios-extend , bluelovers-conventional-changelog-bluelovers , bluelovers/deepmerge , bluelovers/ws-iconv , borsh , botbuilder-js , browsers , buffer-image-size , builder.io-qwik-city , bull-board-bun , bull-board-koa , cache-path , cacheable-lookup , callstack-repack , cdp-sdk , centrifuge-js , chai-enzyme , chat , chat-adapter-discord , chat-adapter-shared , chat-adapter-slack , chat-adapter-teams , chat-adapter-web , cheerio , chialab-rna-browser-test-runner , chialab-rna-dev-server , chialab-rna-saucelabs-test-runner , chialab-wds-plugin-legacy , chrome-launcher , chromium-edge-launcher , cjk-regex , clean-webpack-plugin , clerk-astro , clerk-chrome-extension , clerk-clerk-expo , clerk-clerk-js , clerk-electron , clerk-expo , clerk-expo-native-components , clerk-expo-passkeys , client , cline , cline-llms , cline-sdk , cloudflare-ai , cloudflare-ai-chat , cloudflare-autoconfig , cloudflare-cli-shared-helpers , cloudflare-codemode , cloudflare-containers-shared , cloudflare-deploy-helpers , cloudflare-pages-shared , cloudflare-runtime-types , cloudflare-think , cloudflare-vitest-plugin , cloudflare-workers-auth , cloudflare/agents , codeceptjs , commit-analyzer , commitlint , commitlint-cli , commitlint-core , commitlint-cz-commitlint , commitlint-load , commitlint-prompt , commitlint-prompt-cli , commitlint-travis-cli , composio , composio-anthropic , composio-claude-agent-sdk , composio-cloudflare , composio-core , composio-experimental , composio-google , composio-langchain , composio-llamaindex , composio-openai , composio-slim , composio-typesafe , composio-vercel , compute-budget , computer , configure , copilotkit , copilotkit-agentcore-runner , copilotkit-channels , copilotkit-channels-intelligence , copilotkit-channels-slack , copilotkit-react-native , copilotkit-runtime , copilotkit-sqlite-runner , copilotkit-voice , copy-webpack-plugin , cosmiconfig-typescript-loader , create-factory , create-jest , create-react-app , create-react-router , create-sanity , create-strapi , create-strapi-app , create-yarn-workspaces , crlf-normalize , cross-spawn-extra , css-loader , css-minimizer-webpack-plugin , cz-cli , cz-conventional-changelog , datadog-ci , datadog-datadog-ci-base , datadog-mobile-react-native , datadog-mobile-react-native-apollo-client , datadog-mobile-react-native-babel-plugin , datadog-mobile-react-native-code-push , datadog-mobile-react-native-navigation , datadog-mobile-react-native-openfeature , datadog-mobile-react-native-webview , datadog-mobile-react-navigation , daytona-sdk , daytonaio-sdk , dd-sdk-reactnative , ddg-kit , debug-color2 , deepeval , definitelytyped , del , deps-resolver , destroyable-server , dev-middleware , devcert , devtools , dfinity-candid , dfinity-principal , discord.js , discordjs-rest , discordjs/discord.js , discuz-api , disk , dockerode , docsearch , docsearch-react , docusaurus , docusaurus-babel , docusaurus-bundler , docusaurus-core , docusaurus-mdx-loader , docusaurus-module-type-aliases , docusaurus-plugin-content-blog , docusaurus-plugin-content-docs , docusaurus-plugin-content-pages , docusaurus-plugin-css-cascade-layers , docusaurus-plugin-debug , docusaurus-plugin-google-analytics , docusaurus-plugin-google-gtag , docusaurus-plugin-google-tag-manager , docusaurus-plugin-sitemap , docusaurus-plugin-svgr , docusaurus-preset-classic , docusaurus-search-local , docusaurus-theme-classic , docusaurus-theme-common , docusaurus-theme-mermaid , docusaurus-theme-search-algolia , docusaurus-types , docusaurus-utils , docusaurus-utils-common , docusaurus-utils-validation , docx , dot-values , dotenvx-dotenvx , dr.pogodin-react-native-fs , drizzle-orm , dxup-nuxt , e2b , e2b-cli , e2b-code-interpreter , e2b-dev/e2b , earendil-works-pi-agent-core , earendil-works-pi-ai , earendil-works-pi-durable , earendil-works-pi-env , eas-cli , edgedriver , editor , effect-docgen , effect-openapi-generator , effect-platform-bun , effect-platform-node , effect-platform-node-shared , effect-sql-clickhouse , effect-sql-libsql , effect-sql-mysql2 , effect-sql-sqlite-react-native , effect-vitest , elastic-elasticsearch , elastic-transport , electron , electron-rebuild , elements , elevenlabs-react-native , ember-cli-babel , ember-test-waiters , embroider-router , emotion-native , engine.io , env-run-path , envelop-newrelic , enzyme , enzyme-adapter-react-17 , enzyme-matchers , enzyme-to-json , enzymejs/enzyme , epub-extract , error-stack2 , esbuild-loader , esjzone-api , eslint-plugin-graphql , eslint-webpack-plugin , estimo , ethereum-cryptography , ethereumjs-ethereumjs-block , ethereumjs-tx , ethereumjs-wallet , ethereumjs/ethereumjs-monorepo , eval , eve , eve-buzz-acp-adapter , evolution-sdk , evolution-sdk-devnet , executor , executor-js-config , executor-js-plugin-graphql , executor-js-plugin-mcp , executor-js-plugin-openapi , expect , expect-webdriverio , expo , expo-app-intents , expo-apple-authentication , expo-application , expo-asset , expo-audio , expo-auth-session , expo-blur , expo-build-properties , expo-calendar , expo-camera , expo-cli , expo-clipboard , expo-config , expo-configure-splash-screen , expo-constants , expo-contacts , expo-crypto , expo-dev-client , expo-dev-client-components , expo-dev-launcher , expo-dev-menu , expo-dev-menu-interface , expo-dev-server , expo-dev-tools , expo-device , expo-document-picker , expo-expo-cli , expo-file-system , expo-font , expo-glass-effect , expo-haptics , expo-hinge , expo-image , expo-image-loader , expo-linking , expo-local-authentication , expo-localization , expo-location , expo-logger , expo-mail-composer , expo-manifests , expo-maps , expo-media-library , expo-metro-config , expo-metro-file-map , expo-module-scripts , expo-modules-core , expo-modules-jsi , expo-network , expo-notifications , expo-plugin-help , expo-prebuild-config , expo-print , expo-pwa , expo-router , expo-router-server , expo-screen-capture , expo-screen-orientation , expo-secure-store , expo-sensors , expo-server , expo-server-sdk , expo-sharing , expo-splash-screen , expo-sqlite , expo-status-bar , expo-symbols , expo-system-ui , expo-template-bare-minimum , expo-template-blank , expo-template-blank-typescript , expo-template-default , expo-template-tabs , expo-tracking-transparency , expo-updates , expo-updates-interface , expo-vector-icons , expo-video , expo-web-browser , expo-webpack-config , expo-widgets , expo-xdl , expo/eas-cli , ext-apps , extract-bad-epub , extract-zip , facebook/jest , fast-check-packaged , fcl-js , fetch , file-loader , file-system-cache , find-chrome-bin , find-pkg-ws , find-up-paths , find-yarn-workspace-root , firebase , firebase-admin-node , firebase-auth , firebase-functions , firebase-functions-compat , firebase-js-sdk , firebase-rules-unit-testing , firebase-storage , firebase-storage-compat , firestore-compat , fixturify , fly-import , fontaine , forge , fork-ts-checker-webpack-plugin , fs-symlink-extra , fumadocs , fumadocs-ai-chat , fumadocs-graphql , fumadocs-openapi , fumadocs-sanity , fumadocs-ui , fumapress , fumapress-ai , fumapress-graphql , gapic-node-processing , gateway , gatsby , gatsby-cli , gatsby-core-utils , gatsby-link , gatsby-page-utils , gatsby-plugin-offline , gatsby-plugin-page-creator , gatsby-plugin-react-helmet , gatsby-plugin-sharp , gatsby-remark-responsive-iframe , gatsby-sharp , gatsby-source-wordpress , gax-nodejs , geckodriver , get , get-it , get-workspaces , git-lazy-debug , git-lazy-diff-staged , git-lazy-info , git-lazy-root , git-lazy-spawn , git-root2 , github , gitlab-ai-provider , glimmer-component , glob-promise , globby , google-ads-datamanager , google-cloud-aiplatform , google-cloud-alloydb , google-cloud-artifact-registry , google-cloud-bigquery-storage-api , google-cloud-bigtable-api , google-cloud-cloudbuild , google-cloud-commerceproducer , google-cloud-common , google-cloud-compute , google-cloud-contact-center-insights , google-cloud-dataproc , google-cloud-datastore-api , google-cloud-datastream , google-cloud-firestore , google-cloud-functions-framework , google-cloud-kms , google-cloud-logging , google-cloud-logging-api , google-cloud-memorystore , google-cloud-monitoring , google-cloud-node , google-cloud-policy-troubleshooter-iam , google-cloud-productregistry , google-cloud-pubsub , google-cloud-pubsub-api , google-cloud-redis-cluster , google-cloud-resource-manager , google-cloud-security-center , google-cloud-spanner-api , google-cloud-speech , google-cloud-storage , google-cloud-storage-control , google-cloud-text-to-speech , google-developer-knowledge , google-maps-isochrones , google-shopping-inventories , google-shopping-reports , google-shopping-reviews , got , graph-builder , graphile-build-pg , graphile-config , graphiql , graphiql-plugin-doc-explorer , graphiql-plugin-explorer , graphiql-plugin-history , graphiql-react , graphiql-toolkit , graphql-config , graphql-hive-envelop , graphql-inspector , graphql-inspector-cli , graphql-inspector-github-loader , graphql-inspector-url-loader , graphql-mesh-plugin-newrelic , graphql-tools , graphql-tools-executor-legacy-ws , graphql-tools-github-loader , graphql-tools-jest-transform , graphql-tools-url-loader , graphql-upload , graphql-yoga , graphql-yoga-graphiql , graphql-yoga-nestjs-federation , grpc-gcp , grpc-node , guarded-fetch , gutenberg , happy-dom , happy-dom-global-registrator , happy-dom-jest-environment , happy-dom-node-canvas-adapter , happy-dom-server-renderer , hardhat , html-loader , html-webpack-plugin , http-cookie-agent , http-proxy-middleware , httptoolkit-httpolyglot , httptoolkit-websocket-stream , huggingface-transformers , imagemin , import , impound , imvectordb , inngest , inngest-ci , inngest-realtime , inquirer-checkbox , inquirer-confirm , inquirer-core , inquirer-editor , inquirer-expand , inquirer-external-editor , inquirer-input , inquirer-number , inquirer-password , inquirer-prompts , inquirer-rawlist , inquirer-search , inquirer-select , inquirer-type , inquirer.js , ionic-cli-framework , ionic-team/ionic-cli , ionic-utils-fs , isomorphic-dompurify , it-length-prefixed , it-protocol-buffers , javascript , jayson , jest , jest-changed-files , jest-circus , jest-cli , jest-config , jest-console , jest-core , jest-create-cache-key-function , jest-diff , jest-each , jest-environment , jest-environment-jsdom , jest-environment-jsdom-abstract , jest-environment-node , jest-expect , jest-expect-openapi , jest-expo , jest-expo-enzyme , jest-fake-timers , jest-globals , jest-haste-map , jest-jasmine2 , jest-leak-detector , jest-matcher-utils , jest-message-util , jest-mock , jest-pattern , jest-phabricator , jest-pnp-resolver , jest-preset-angular , jest-puppeteer-pkg , jest-repl , jest-reporters , jest-resolve , jest-resolve-dependencies , jest-runner , jest-runtime , jest-serializer , jest-snapshot , jest-snapshot-utils , jest-test-result , jest-test-sequencer , jest-transform , jest-types , jest-util , jest-validate , jest-watch-typeahead , jest-watcher , joshwooding-vite-plugin-react-docgen-typescript , js-genai , js-interfaces , js-libp2p-crypto , js-multistream-select , js-peer-id , jsdom , jsdom-extra , json-render-react-native , juice , just-bash , just-bash-executor , jwks-rsa , karma , keystonehq-animated-qr , kit , kit-plugins , koa-body , koa-bodyparser , kubernetes-client-node , langchain , langchain-core , langchain-langgraph , langchain-langgraph-checkpoint , langchain-langgraph-sdk , langchain-qdrant , langchain-weaviate , langfuse-js , langfuse-otel , langsmith , lazy-cjk-jp-table-alias , lazy-cjk-jp-table-convert , lazy-cjk-novel-filename , lazy-cjk-zh-convert , lazy-cjk-zh-slugify , lazy-cjk-zh2num , lazy-node-semver-ampersand , lazy-node-semver-simple-parse , lazy-node-types-path , lazy-spawn-stringify , lerna , less-loader , libnpmdiff , libnpmexec , libnpmfund , libnpmversion , libp2p , libp2p-interface-compliance-tests , libp2p-interop , libp2p-mdns , libsql-client-ts , libsql-hrana-client , libsql-isomorphic-fetch , libsql-isomorphic-ws , libsql-kysely-libsql , lighthouse , lingui-babel-plugin-extract-messages , lingui-babel-plugin-lingui-macro , lingui-cli , lingui-conf , lingui-core , lingui-extractor-vue , lingui-format-csv , lingui-format-json , lingui-format-po , lingui-format-po-gettext , lingui-loader , lingui-metro-transformer , lingui-react , lingui-solid , lingui-vite-plugin , litesvm , livekit-agents-plugin-google , livekit-agents-plugin-livekit , livekit-react-native , livestore , livestore-adapter-cloudflare , livestore-adapter-web , livestore-common , livestore-common-cf , livestore-framework-toolkit , livestore-livestore , livestore-react , livestore-sqlite-wasm , livestore-sync-cf , livestore-sync-electric , livestore-utils , livestore-utils-dev , livestore-webmesh , loaders.gl-3d-tiles , loaders.gl-compression , loaders.gl-zip , logtape-otel , lucide-astro , lucide-react-native , lynx-js-docs-mcp-server , lynx-js-genui , lynx-js-react-rsbuild-plugin , lynx-js-rsbuild-plugin , lynx-js-rspeedy , manifest , masiro-me-api , masked-view , mastra , mastra-agent-builder , mastra-ai-sdk , mastra-arize , mastra-arthur , mastra-auth , mastra-auth-better-auth , mastra-auth-clerk , mastra-auth-cloud , mastra-auth-firebase , mastra-blaxel , mastra-braintrust , mastra-clickhouse , mastra-client-js , mastra-cloudflare , mastra-cloudflare-d1 , mastra-cloudflare-sandbox , mastra-code-sdk , mastra-connect , mastra-core , mastra-datadog , mastra-daytona , mastra-deepeval , mastra-deployer , mastra-deployer-netlify , mastra-deployer-sandbox , mastra-deployer-vercel , mastra-discord , mastra-docker , mastra-dsql , mastra-dynamodb , mastra-e2b , mastra-editor , mastra-elysia , mastra-evals , mastra-express , mastra-factory , mastra-github-signals , mastra-google-cloud-pubsub , mastra-hono , mastra-inngest , mastra-koa , mastra-langfuse , mastra-langsmith , mastra-loggers , mastra-longmemeval , mastra-mcp , mastra-mcp-docs-server , mastra-mesa , mastra-mongodb , mastra-mysql , mastra-nestjs , mastra-observability , mastra-opencode , mastra-opensearch , mastra-oracledb , mastra-otel-bridge , mastra-otel-exporter , mastra-parallel , mastra-playground-ui , mastra-posthog , mastra-qdrant , mastra-react , mastra-sentry , mastra-server-adapters-test-suite , mastra-slack , mastra-spanner , mastra-tanstack-start , mastra-tavily , mastra-teams , mastra-temporal , mastra-turso , mastra-valkey , mastra-valkey-streams , mastra-vercel , mastra-voice-google-gemini-live , mastra-weaviate , mastracode , mdx , medplum-bot-layer , mem-fs , mem-fs-editor , memo , mercuriusjs-gateway , meros , metamask-account-tree-controller , metamask-accounts , metamask-accounts-controller , metamask-address-book-controller , metamask-analytics-controller , metamask-assets-controller , metamask-assets-controllers , metamask-authenticated-user-storage , metamask-bridge-controller , metamask-bridge-status-controller , metamask-chain-agnostic-permission , metamask-chomp-api-service , metamask-claims-controller , metamask-config-registry-controller , metamask-controller-utils , metamask-core , metamask-core-backend , metamask-delegation-controller , metamask-eth-json-rpc-middleware , metamask-eth-money-mpc-keyring , metamask-eth-snap-keyring , metamask-gas-fee-controller , metamask-gator-permissions-controller , metamask-keyring-controller , metamask-message-manager , metamask-money-account-api-data-service , metamask-money-account-controller , metamask-money-account-upgrade-controller , metamask-multichain-account-service , metamask-multichain-network-controller , metamask-multichain-transactions-controller , metamask-network-controller , metamask-network-enablement-controller , metamask-notification-services-controller , metamask-permission-controller , metamask-perps-controller , metamask-phishing-controller , metamask-preferences-controller , metamask-profile-controller , metamask-profile-metrics-controller , metamask-profile-sync-controller , metamask-ramps-controller , metamask-remote-feature-flag-controller , metamask-rpc-methods , metamask-seedless-onboarding-controller , metamask-selected-network-controller , metamask-shield-controller , metamask-signature-controller , metamask-smart-transactions-controller , metamask-snap-account-service , metamask-snaps-controllers , metamask-snaps-execution-environments , metamask-snaps-jest , metamask-snaps-rpc-methods , metamask-snaps-simulation , metamask-snaps-utils , metamask-social-controllers , metamask-subscription-controller , metamask-transaction-controller , metamask-transaction-pay-controller , metamask-wallet , metro , metro-config , metro-file-map , metro-transform-worker , mfa-wallet-sdk , microsoft-365-agents-toolkit , microsoft/botbuilder-js , mini-css-extract-plugin , miniflare , minimizer-webpack-plugin , mobile-wallet-adapter , mockttp , modern-js-adapter-rstest , modern-js-app-tools , modern-js-builder , modern-js-plugin-bff , modern-js-render , modern-js-runtime , modern.js , module-federation-cli , module-federation-core , module-federation-dts-plugin , module-federation-enhanced , module-federation-modern-js , module-federation-nextjs-mf , module-federation-rsbuild-plugin , module-federation-rspack , module-federation-storybook-addon , module-federation/core , module-federation/vite , mongodb , mongodb-connection-string-url , mongodb-data-service , mongodb-js-compass-electron-menu , mongodb-js-compass-utils , mongodb-js-connection-form , mongodb-js-connection-info , mongodb-js-mocha-config-devtools , mongodb-js-monorepo-tools , mongoose , mutate , my-bad , mysql2 , mysten-codegen , mysten-create-dapp , mysten-docs , mysten-gcp-kms-signer , mysten-signers , mysten-walletconnect-wallet , native-html-css-processor , native-html-transient-render-engine , neondatabase-serverless , nestjs-platform-socket.io , netlify-build , netlify-opentelemetry-sdk-setup , newrelic-security-agent , ngtools-webpack , nice-grpc , nitro , node-mssql , node-novel-normalize , node-saucelabs , nodejs-datastore , nomicfoundation-hardhat-ethers , nomicfoundation-hardhat-keystore , nomicfoundation-hardhat-utils , nomicfoundation-hardhat-verify , nomicfoundation-ignition-core , npm , npm-init2 , npm-package-json-loader , npm:@keystonehq/bc-ur-registry-eth , npm:@metamask/money-account-utils , npm:@metamask/polling-controller , npm:@metamask/sentinel-api-service , npm:@pnpm/exec.lifecycle , npm:@pnpm/exec.prepare-package , npm:@sanity/validation , npm:gatsby-theme-blog-core , npm:libnpmpack , npm:modal , npmcli-arborist , npmcli-metavuln-calculator , null-loader , nuxt , nuxt-cli , nuxt-devtools-kit , nuxt-devtools-ui-kit , nuxt-kit , nuxt-nitro-server , nuxt-rspack-builder , nuxt-vite-builder , nuxt-vite-server , nuxt-webpack-builder , nx , nx-angular , nx-angular-rspack , nx-angular-rspack-compiler , nx-cypress , nx-detox , nx-devkit , nx-docker , nx-esbuild , nx-eslint , nx-eslint-plugin , nx-expo , nx-express , nx-jest , nx-js , nx-maven , nx-module-federation , nx-nest , nx-next , nx-node , nx-oxlint , nx-playwright , nx-plugin , nx-react , nx-react-native , nx-rollup , nx-rsbuild , nx-rspack , nx-storybook , nx-vite , nx-vitest , nx-vue , nx-web , nx-webpack , nx-workspace , oas , oas-normalize , oclif-plugin-plugins , oclif/core , octanejs-astro , octanejs-docusaurus , octanejs-electron , octanejs-livestore , octanejs-solana-kit , octokit , octokit-app , octokit-auth-app , octokit-auth-probot , office-addin-manifest , ollama-ai-provider-v2 , onflow-fcl-rainbowkit-adapter , onnxruntime-web , op-sqlite , openai , openai-agents , openai-agents-extensions , openai-agents-js , openai-agents-openai , openai-agents-realtime , openclaw-proxyline , opencode , opencode-plugin , opencode-plugin-browser , opencode-sdk , opencode-simulation , opencode-util , openinference , openrouter-ai-sdk-provider , opentelemetry-auto-instrumentations-node , opentelemetry-contrib-test-utils , opentelemetry-exporter-logs-otlp-grpc , opentelemetry-exporter-logs-otlp-http , opentelemetry-exporter-logs-otlp-proto , opentelemetry-exporter-metrics-otlp-grpc , opentelemetry-exporter-metrics-otlp-http , opentelemetry-exporter-metrics-otlp-proto , opentelemetry-exporter-trace-otlp-grpc , opentelemetry-exporter-trace-otlp-http , opentelemetry-exporter-trace-otlp-proto , opentelemetry-instrumentation-bunyan , opentelemetry-instrumentation-connect , opentelemetry-instrumentation-memcached , opentelemetry-instrumentation-mysql , opentelemetry-instrumentation-oracledb , opentelemetry-instrumentation-pg , opentelemetry-instrumentation-tedious , opentelemetry-otlp-exporter-base , opentelemetry-otlp-grpc-exporter-base , opentelemetry-otlp-transformer , opentelemetry-sdk-node , orama-orama , orpc-ai-sdk , orval , oven-sh/bun , p-transform , packager , pacote , panda , parse5 , patch-project , path-dir-normalize , path-env , path-in-dir , path-parents , percy-cli , percy-cli-app , percy-cli-build , percy-cli-command , percy-cli-config , percy-cli-doctor , percy-cli-exec , percy-cli-snapshot , percy-cli-upload , percy-core , percy-webdriverio , pg-sql2 , php-wasm-web , phpwind-api , pi , pi-mcp-adapter , pkgs , playwright-core , playwright-test-scoped , playwright-webkit , plop , plugin-warn-if-update-available , plugins , pnpm , pnpm-auth.commands , pnpm-building.after-install , pnpm-cache.commands , pnpm-cli.commands , pnpm-config.commands , pnpm-deps.compliance.audit , pnpm-deps.compliance.license-scanner , pnpm-deps.compliance.sbom , pnpm-deps.github-actions , pnpm-deps.inspection.commands , pnpm-deps.inspection.list , pnpm-deps.inspection.tree-builder , pnpm-deps.status , pnpm-engine.pm.commands , pnpm-engine.runtime.commands , pnpm-engine.runtime.deno-resolver , pnpm-exec.npm-lifecycle , pnpm-fetching.binary-fetcher , pnpm-fetching.directory-fetcher , pnpm-fetching.git-fetcher , pnpm-fetching.pick-fetcher , pnpm-fetching.tarball-fetcher , pnpm-fs.indexed-pkg-importer , pnpm-hooks.types , pnpm-installing.client , pnpm-installing.context , pnpm-installing.deps-installer , pnpm-installing.linking.modules-cleaner , pnpm-installing.package-requester , pnpm-installing.read-projects-context , pnpm-lockfile.fs , pnpm-lockfile.make-dedicated-lockfile , pnpm-lockfile.preferred-versions , pnpm-lockfile.settings-checker , pnpm-lockfile.to-pnp , pnpm-lockfile.verification , pnpm-modules-mounter.daemon , pnpm-pkg-manifest.commands , pnpm-pnpr.client , pnpm-registry-access.commands , pnpm-releasing.commands , pnpm-resolving.default-resolver , pnpm-resolving.git-resolver , pnpm-store.commands , pnpm-store.controller , pnpm-store.controller-types , pnpm-store.create-cafs-store , pnpm-store.pkg-finder , pnpm-worker , pnpm-workspace.commands , pnpm-workspace.injected-deps-syncer , pnpm-workspace.projects-graph , pnpm-workspace.state , polkadot-api , polkadot-api-augment , polkadot-api-base , polkadot-api-cli , polkadot-api-derive , polkadot-api-docgen , polkadot-api-scoped , polkadot-api/polkadot-api , polkadot-js/api , polkadot-js/wasm , polkadot-keyring , polkadot-networks , polkadot-rpc-augment , polkadot-rpc-core , polkadot-rpc-provider , polkadot-types-augment , polkadot-types-codec , polkadot-types-create , polkadot-types-known , polkadot-types-support , polkadot-util , polkadot-util-crypto , polkadot-x-fetch , polkadot-x-randomvalues , polkadot-x-ws , portabletext-block-tools , portabletext-editor , portabletext-plugin-character-pair-decorator , portabletext-plugin-emoji-picker , portabletext-plugin-markdown-shortcuts , portabletext-plugin-one-line , portabletext-plugin-paste-link , portabletext-plugin-sdk-value , portabletext-plugin-typeahead-picker , portabletext-plugin-typography , portabletext-sanity-bridge , portabletext-toolbar , porto , postcss-loader , postgraphile-core , posthog-ai , posthog-js , posthog-webpack-plugin , powersync-node , powersync-nuxt , powersync-react-native , preferred-pm , pretty-format , prisma-adapter-libsql , prisma-adapter-neon , prisma-generator-helper , privy-io , probot , probot/pino , proto-loader , proto3-json-serializer , puppeteer , puppeteer-core , qdrant-js , qdrant-js-client-rest , qdrant-qdrant-js , qwik , racejar , rainbowkit , raw-loader , re2 , read-tls-client-hello , readme-oas-to-har , readme-openapi-parser , record , redocly-cli , redocly-respect-core , redocly-reunite-integration , release-it , release-notes-generator , remark , remix , remote , remotion-babel-loader , remotion-bundler , remotion-cli , remotion-cloudrun , remotion-enable-scss , remotion-lambda , remotion-serverless , remotion-studio-server , remotion-tailwind , remotion-tailwind-v4 , remotion-vercel , remotion-video-matting , remotion-whisper-webgpu , reown-appkit , reown-appkit-adapter-bitcoin , reown-appkit-adapter-ethers , reown-appkit-adapter-ethers5 , reown-appkit-adapter-solana , reown-appkit-adapter-wagmi , reown-appkit-controllers , reown-appkit-experimental , reown-appkit-pay , reown-appkit-scaffold-ui , reown-appkit-siwe , reown-appkit-siwx , reown-appkit-ui , reown-appkit-universal-connector , reown-appkit-utils , reown-appkit-wallet-button , repack , restful-decorator , retry-request , rock-js-plugin-metro , rock-js-plugin-repack , rock-js-template-default , rock-js-welcome-screen , rollup-plugin-copy , rollup-plugin-terser , rsbuild , rsbuild-plugin-css-minimizer , rsdoctor-core , rsdoctor-graph , rsdoctor-rspack-plugin , rsdoctor-sdk , rsdoctor-shared , rsdoctor-types , rsdoctor-utils , rspack-test-tools , run-script , runtime-cli , rushstack , rushstack-debug-certificate-manager , rushstack-heft-config-file , rushstack-heft-jest-plugin , rushstack-heft-vscode-extension-plugin , rushstack-heft-vscode-extension-rig , rushstack-heft-webpack5-plugin , rushstack-lookup-by-path , rushstack-problem-matcher , rushstack-rush-http-build-cache-plugin , rushstack-rush-redis-cobuild-plugin , rushstack-rush-sdk , rushstack-worker-pool , rxdb , sandbox , sanity , sanity-access-ui , sanity-blueprints , sanity-cli , sanity-cli-build , sanity-cli-test , sanity-codegen , sanity-core-loader , sanity-export , sanity-io/cli , sanity-migrate , sanity-mutator , sanity-plugin-mux-input , sanity-presentation-comlink , sanity-preview-url-secret , sanity-react-loader , sanity-schema , sanity-sdk , sanity-svelte-loader , sanity-template-validator , sanity-types , sanity-util , sanity-vercel-protection-bypass , sanity-vision , sanity-visual-editing-csm , sanity-workbench-cli , sap-ai-provider , sass-loader , scalar , scalar-agent-chat , scalar-api-client , scalar-api-client-react , scalar-api-reference , scalar-api-reference-react , scalar-astro , scalar-docusaurus , scalar-json-magic , scalar-nuxt , scalar-openapi-parser , scalar-openapi-to-markdown , scalar-pre-post-request-scripts , scalar-server-side-rendering , scalar-sidebar , scalar-starlight , scalar/scalar , schema-utils , sdk , sdk-typescript , selfsigned , semantic-release , semantic-release-changelog , semantic-release-git , semantic-release-monorepo , semantic-release-npm , semantic-release-plugin-decorators , sentry-astro , sentry-gatsby , sentry-javascript-bundler-plugins , sentry-nextjs , sentry-node , sentry-nuxt , sentry-remix , sentry-webpack-plugin , shadcn , shadcn-registry , sharp , sitemap , size-limit-preset-app , size-limit-preset-big-lib , size-limit-time , size-limit-webpack , size-limit-webpack-css , slack-bolt , slack-logger , slack-oauth , slack-socket-mode , slack-web-api , smithy-undici-http-handler , smooth-code/jest-puppeteer , socket.io , solana-client , solana-connector , solana-connector-debugger , solana-foundation-solana-web3.js , solana-keychain , solana-kit , solana-kit-plugin-wallet , solana-mobile-mobile-wallet-adapter-protocol , solana-mobile-mobile-wallet-adapter-protocol-kit , solana-mobile-mobile-wallet-adapter-protocol-web3js , solana-program-address-lookup-table , solana-program-loader-v3 , solana-program-program-metadata , solana-program-zk-elgamal-proof , solana-react , solana-react-hooks , solana-rpc , solana-rpc-transport-http , solana-transaction-confirmation , solana-wallet-adapter , solana-wallet-adapter-base-ui , solana-wallet-adapter-example , solana-wallet-adapter-react-ui , sort-package-json , sort-package-json3 , source-map-loader , speedline , split-smartly2 , sqlite3 , storybook , storybook-addon-actions , storybook-addon-backgrounds , storybook-addon-controls , storybook-addon-docs , storybook-addon-essentials , storybook-addon-highlight , storybook-addon-interactions , storybook-addon-jest , storybook-addon-measure , storybook-addon-outline , storybook-addon-storysource , storybook-addon-toolbars , storybook-addon-viewport , storybook-angular , storybook-builder-vite , storybook-builder-webpack5 , storybook-cli , storybook-codemod , storybook-components , storybook-core-client , storybook-csf-plugin , storybook-csf-tools , storybook-ember , storybook-html-webpack5 , storybook-instrumenter , storybook-manager-api , storybook-nextjs , storybook-node-logger , storybook-preact-webpack5 , storybook-preset-create-react-app , storybook-preset-html-webpack , storybook-preset-react-webpack , storybook-preset-vue3-webpack , storybook-preview-api , storybook-react-native-web-vite , storybook-react-vite , storybook-react-webpack5 , storybook-server-webpack5 , storybook-source-loader , storybook-svelte-webpack5 , storybook-types , storybook-vue3-webpack5 , str-util , strapi , strapi-admin , strapi-cloud-cli , strapi-content-manager , strapi-content-releases , strapi-content-type-builder , strapi-core , strapi-data-transfer , strapi-database , strapi-email , strapi-generators , strapi-i18n , strapi-permissions , strapi-plugin-cloud , strapi-plugin-color-picker , strapi-plugin-documentation , strapi-plugin-graphql , strapi-plugin-sentry , strapi-plugin-users-permissions , strapi-provider-email-mailgun , strapi-provider-email-sendgrid , strapi-provider-upload-cloudinary , strapi-provider-upload-local , strapi-review-workflows , strapi-strapi , strapi-types , strapi-upgrade , strapi-upload , strapi-utils , streamx , style-loader , swc-plugin , sync-lockfile , syosetu-api , system , tabler-icons-astro , tailwindcss-vite , tailwindcss-webpack , tanstack-ai-gemini , tanstack-ai-sandbox-boxd , tanstack-ai-sandbox-daytona , tanstack-ai-sandbox-vercel , tanstack-ai-vertex , tanstack-expo-db-sqlite-persistence , tanstack-react-native-db-sqlite-persistence , tanstack-rxdb-db-collection , taquito , taquito-beacon-wallet , taquito-ledger-signer , taquito-remote-signer , taquito-sapling , taquito-taquito , taquito-tzip12 , taquito-wallet-connect , tar-fs , tar-stream , teams.ts , tedious , teex , telemetry , temporalio-activity , temporalio-ai-sdk , temporalio-client , temporalio-common , temporalio-nexus , temporalio-proto , temporalio-worker , temporalio-workflow , text-decoder , theme-ui , token , token-2022 , toolkit , trezor-connect-web , trezor-suite , ts-command-line , ts-loader , ts-node , ts-sdks , ts-type , ts-type-is-array , turbopuffer-turbopuffer , type-graphql , types-accepts , types-bl , types-brotli , types-bunyan , types-cli-progress , types-cls-hooked , types-co-body , types-cookies , types-docker-modem , types-duplexify , types-formidable , types-graceful-fs , types-is-buffer , types-jsdom , types-jsonwebtoken , types-koa , types-koa-compose , types-liftoff , types-memcached , types-multer , types-mysql , types-oracledb , types-passport , types-passport-strategy , types-pbkdf2 , types-pg , types-pg-pool , types-plist , types-protocol-buffers-schema , types-pumpify , types-readable-stream , types-recursive-readdir , types-request , types-rimraf , types-ssh2-streams , types-stoppable , types-stream-buffers , types-tedious , types-through , types-vfile-message , types-wait-on , types-xml-encryption , types-xml2js , types-yauzl , typescript-client , unctx , undici , unhead , unhead-bundler , unhead-vue , unified , unifont , unimport , universal-github-app-jwt , unocss , unocss-nuxt , unocss-vite , unplugin , unstorage , upath2 , url-loader , valkey-glide , value-from-record , vercel , vercel-blob , vercel-sandbox , vercel-sandbox-mock , verdaccio-types , victory-native , vinyl-file , virmator-test , visual-editing , vite , vite-dev-rpc , vite-hot-client , vite-node , vite-plugin-basic-ssl , vite-plugin-checker , vite-plugin-inspect , vite-plugin-react , vite-plugin-rnw , vite-plugin-vue , vite-plugin-vue-tracer , vite-tsconfig-paths , vitefu , vitejs-plugin-react , vitejs-plugin-react-swc , vitest , vitest-mocker , vitest-webdriverio , vscode-vsce , wagmi , wagmi-connectors , waku , wallet-adapter , wallet-ui-core , wallet-ui-react , wallet-ui-react-native-kit , wallet-ui-react-native-web3js , walletconnect-core , walletconnect-ethereum-provider , walletconnect-monorepo , walletconnect-sign-client , walletconnect-solana-adapter , walletconnect-types , walletconnect-universal-provider , walletconnect-utils , walletconnect-utils-scoped , wasm , wdio , wdio-ai-service , wdio-appium-service , wdio-browser-runner , wdio-browserstack-service , wdio-cli , wdio-config , wdio-devtools-service , wdio-electrobun-service , wdio-electron-service , wdio-elements , wdio-globals , wdio-image-comparison-core , wdio-jasmine-framework , wdio-lighthouse-service , wdio-local-runner , wdio-ocr-service , wdio-runner , wdio-sauce-service , wdio-session , wdio-shared-store-service , wdio-snapshot , wdio-tauri-service , wdio-testingbot-service , wdio-utils , wdio-visual-service , wdio-webdriver-mock-service , web-dev-server , web-dev-server-core , web-dev-server-rollup , web-infra-dev/modern.js , web-test-runner , web-test-runner-browserstack , web-test-runner-chrome , web-test-runner-commands , web-test-runner-core , web-test-runner-coverage-v8 , web-test-runner-mocha , web-test-runner-saucelabs , web-test-runner-visual-regression , web-test-runner-webdriver , web3auth , web3auth-web , webdriver , webdriverio , webdriverio/devtools , webpack , webpack-assets-manifest , webpack-cli , webpack-cli-configtest , webpack-cli-info , webpack-cli-serve , webpack-dev-middleware , webpack-dev-server , webpack-manifest-plugin , webpack-plugin-ramdisk , webpack-plugin-serve , webpack-subresource-integrity , webpackbar , wenku8-api , wordpress-block-editor , wordpress-components , wordpress-dependency-extraction-webpack-plugin , wordpress-docgen , wordpress-e2e-test-utils-playwright , wordpress-env , wordpress-jest-console , wordpress-jest-preset-default , wordpress-playground , wordpress-project-management-automation , wordpress-readable-js-assets-webpack-plugin , wordpress-scripts , workbench , workbox , worker , workers-ai-provider , workers-sdk , workflow , workflow-ai , workflow-astro , workflow-builders , workflow-cli , workflow-core , workflow-nest , workflow-next , workflow-nitro , workflow-nuxt , workflow-rollup , workflow-sveltekit , workflow-vite , workflow-vitest , workflow-web , workflow-web-shared , workflow-world-local , workflow-world-postgres , workflow-world-testing , workflow-world-vercel , workflows , workspaces-config , wp-playground-blueprints , wp-playground-cli , wp-playground-storage , wp-playground-tools , ws-array , ws-error , ws-git-lazy , ws-glob , ws-iconv , ws-jsdom-extra , ws-pkg-list , ws-regexp , ws-rest , ws-root-changelog , ws-ts-type , ws-yarn-workspaces , wyw-in-js , wyw-in-js-babel-preset , wyw-in-js-bun , wyw-in-js-cli , wyw-in-js-esbuild , wyw-in-js-parcel-transformer , wyw-in-js-rollup , wyw-in-js-transform , wyw-in-js-turbopack-loader , wyw-in-js-vite , wyw-in-js-webpack-loader , x402 , x402-paywall , xdl , yarn-berry-deduplicate , yarn-list-link , yarn-tool-changelog , yarn-tool-check-pkg-bin , yarn-tool-detect-yarnlock-version , yarn-tool-dotenv , yarn-tool-env-path , yarn-tool-find-deps , yarn-tool-find-tsconfig , yarn-tool-fix-all , yarn-tool-fix-ws-links , yarn-tool-fix-ws-pkgs-link , yarn-tool-fix-ws-versions , yarn-tool-fnm-detect , yarn-tool-get-paths-by-type , yarn-tool-get-pkg-bin , yarn-tool-ignore , yarn-tool-init-path , yarn-tool-is-published , yarn-tool-ncu , yarn-tool-ncu-ws , yarn-tool-node-modules , yarn-tool-node-modules-is-alias , yarn-tool-node-modules-link , yarn-tool-normalize-deps-value , yarn-tool-npa-to-deps , yarn-tool-npa-to-deps-query , yarn-tool-npm-package-arg-util , yarn-tool-pack-package , yarn-tool-path-parents , yarn-tool-pkg-deps-add , yarn-tool-pkg-deps-util , yarn-tool-pkg-entry-util , yarn-tool-pkg-git-info , yarn-tool-pkg-hosted-info , yarn-tool-pkg-list-to-types , yarn-tool-pkg-name-to-types , yarn-tool-pkg-version-query , yarn-tool-publish-retry , yarn-tool-resolve-package , yarn-tool-run-script-lifecycle , yarn-tool-script-lifecycle , yarn-tool-search-workspace-prefix-by-name , yarn-tool-semver-diff , yarn-tool-sort-lerna-json , yarn-tool-sort-package-json-exports , yarn-tool-sort-package-json-order , yarn-tool-tag , yarn-tool-version-recommended , yarn-tool-version-style-jetbrains , yarn-tool-workspaces-project , yarn-tool-ws-changed , yarn-tool-ws-find-up-paths , yarn-tool-ws-scope , yarn-tool-yarn-struct-utils , yarn-tool-yarnlock , yarn-tool-yarnlock-dedupe , yarn-tool-yarnlock-diff , yarn-tool-yarnlock-entries , yarn-tool-yarnlock-fs , yarn-tool-yarnlock-ncu , yarn-tool-yarnlock-parse , yarn-tool-yarnlock-parse-assert , yarn-tool-yarnlock-parse-raw , yarn-tool-yarnlock-parsed-to-json , yarn-tool-yarnlock-stringify , yarn-tool-yarnlock-types , yarn-tool-yarnlock-util , yarnpkg-core , yarnpkg-extensions , yarnpkg-nm , yeoman-adapter , yeoman-api , yeoman-generator , yeoman-transform , yeoman/environment , zbsearch-plugin-starlight , zbsearch-runtime-cloudflare , zephyr-astro-integration , zephyr-metro-plugin , zephyr-modernjs-plugin , zephyr-native-cache , zephyr-nuxt-module , zephyr-webpack-plugin , zeroentropy

Affected packages:

semantic-release-monorepo @ 8.0.2 (+16661 more)