CVE-2026-14643

About vulnerability

undici’s cache interceptor mishandles optional whitespace placed around the equals sign of a qualified no-cache or private Cache-Control directive. In undici from 7.0.0 up to before 7.29.0 and from 8.0.0 up to before 8.9.0, the parser either drops the directive or stores a field name with literal quote characters, so the cache decision fails to recognize the qualification and the response is stored. In shared-cache mode, this lets a response containing one user’s authenticated data be served from cache to a later caller, including an unauthenticated one, when both requests resolve to the same cache key. It affects applications that enable the cache interceptor in shared mode, forward Authorization headers upstream, and receive cacheable responses with qualified directives padded with whitespace around the equals sign. This is the whitespace-around-equals variant that the fix for CVE-2026-9678 did not normalize, and it is fixed in undici 7.29.0 and 8.9.0.

Affected product:

@graphql-cli/common , AngularJS , Lodash , MariaDB , MetaMask/core , Next.js , Node.js , Protocol Buffers , React , Vue , a2a-js-sdk , adk-js , ai-sdk-harness-pi , angular-animations , angular-build , angular-devkit-build-angular , angular-pwa , angular-router , api-extractor-model , apollo , apollo-codegen-flow , apollo-codegen-scala , apollo-env , apollo-gateway , apollo-graphql , apollo-language-server , apollo-server , apollo-server-hapi , apollo-server-plugin-operation-registry , apollo-tooling , apollographql/apollo-client , aptos-core , aptos-labs-wallet-adapter-core , aptos-ts-sdk , arizeai-openinference-tanstack-ai , async-storage , augment-vir-assert , automatic-vendor-sharing , aws-cdk , azure-sdk-for-js , babel-jest , babel-loader , babel-preset-expo , babel-preset-jest , berry , bl , blockchain-link-utils , browser-sync , browsers , buffer-image-size , bull-board-api , bull-board-bun , bull-board-cli , bull-board-elysia , bull-board-h3 , bull-board-hapi , bull-board-hono , bull-board-koa , bull-board-metrics , cacheable-lookup , celo-wallet-base , celo-wallet-hsm , celo-wallet-hsm-azure , celo-wallet-hsm-gcp , celo-wallet-ledger , celo-wallet-local , celo-wallet-remote , celo-wallet-rpc , centrifuge-js , chainsafe-libp2p-noise , chat , chat-adapter-discord , chat-adapter-gchat , chat-adapter-github , chat-adapter-linear , chat-adapter-messenger , chat-adapter-shared , chat-adapter-slack , chat-adapter-state-ioredis , chat-adapter-state-memory , chat-adapter-state-pg , chat-adapter-state-redis , chat-adapter-teams , chat-adapter-telegram , chat-adapter-tests , chat-adapter-twilio , chat-adapter-web , chat-adapter-whatsapp , chat-adapter-x , chrome-launcher , chromedriver , chromium-edge-launcher , clean-webpack-plugin , codeshift-core , colors-option , commitlint , confluent-kafka-javascript , connect-multichain , copy-webpack-plugin , core , cosmiconfig-typescript-loader , create-jest , create-module-federation , create-rspack , create-sanity , create-zephyr-apps , css-loader , css-minimizer-webpack-plugin , decap-cms , definitelytyped , del , destroyable-server , dev-middleware , developer-tooling , diff-sequences , discord.js , discordjs/discord.js , docusaurus , docusaurus-babel , docusaurus-bundler , docusaurus-core , docusaurus-mdx-loader , docusaurus-module-type-aliases , docusaurus-plugin-content-blog , docusaurus-plugin-content-docs , docusaurus-plugin-content-pages , docusaurus-plugin-css-cascade-layers , docusaurus-plugin-debug , docusaurus-plugin-google-analytics , docusaurus-plugin-google-gtag , docusaurus-plugin-google-tag-manager , docusaurus-plugin-sitemap , docusaurus-plugin-svgr , docusaurus-theme-classic , docusaurus-theme-common , docusaurus-theme-search-algolia , docusaurus-types , docusaurus-utils , docusaurus-utils-common , docusaurus-utils-validation , dotansimha-graphql-yoga , earendil-works-pi-agent-core , earendil-works-pi-ai , ecosystem , electron , ember-auto-import , ember-cli-babel , engine.io , esbuild-loader , eslint-config-expo , eslint-plugin-formatjs , eslint-plugin-graphql , ethereum-cryptography , ethereumjs-account , ethereumjs-block , ethereumjs-client , ethereumjs-monorepo , ethereumjs-trie , ethereumjs-tx , ethereumjs-vm , ethereumjs-wallet , ethereumjs/ethereumjs-monorepo , expect , expect-webdriverio , expo , expo-app-integrity , expo-application , expo-asset , expo-auth-session , expo-background-fetch , expo-blur , expo-camera , expo-cli , expo-config , expo-constants , expo-crypto , expo-file-system , expo-font , expo-gl , expo-glass-effect , expo-image , expo-intent-launcher , expo-keep-awake , expo-linear-gradient , expo-linking , expo-local-build-cache-provider , expo-manifests , expo-mesh-gradient , expo-metro-config , expo-metro-file-map , expo-module-scripts , expo-modules-core , expo-modules-jsi , expo-modules-test-core , expo-navigation-bar , expo-network , expo-network-addons , expo-plugin-help , expo-prebuild-config , expo-print , expo-router , expo-screen-capture , expo-sharing , expo-splash-screen , expo-sqlite , expo-standard-web-crypto , expo-status-bar , expo-symbols , expo-task-manager , expo-template-bare-minimum , expo-template-blank , expo-template-blank-typescript , expo-template-default , expo-template-tabs , expo-updates , expo-updates-interface , expo-vector-icons , expo-web-browser , expo-widgets , extract-css-chunks-webpack-plugin , extract-zip , facebook/jest , facebook/metro , federation , fetch , file-loader , file-system-cache , firebase , firebase-js-sdk , firestore-compat , fixturify , fork-ts-checker-webpack-plugin , formatjs-ts-transformer , friendly-errors-webpack-plugin , fumadocs , fumadocs-graphql , fumadocs-openapi , gateway , gatsby , gax-nodejs , get , get-workspaces , globalart-nestjs-zod , globby , google-adk , google-cloud-artifact-registry , google-cloud-bigquery-storage-api , google-cloud-bigtable-api , google-cloud-common , google-cloud-datastore-api , google-cloud-functions-framework , google-cloud-kms , google-cloud-logging , google-cloud-logging-api , google-cloud-node , google-cloud-storage , google-cloud-vertexai , got , got-cjs , graphile-build , graphile-build-pg , graphile-utils , graphql-code-generator , graphql-code-generator-community , graphql-codegen-add , graphql-codegen-client-preset , graphql-codegen-core , graphql-codegen-gql-tag-operations , graphql-codegen-schema-ast , graphql-codegen-typed-document-node , graphql-codegen-typescript , graphql-codegen-typescript-document-nodes , graphql-codegen-typescript-msw , graphql-codegen-typescript-resolvers , graphql-config , graphql-hive-envelop , graphql-hive-gateway-runtime , graphql-hive/console , graphql-language-service-server , graphql-live-queries , graphql-mesh , graphql-mesh-cache-cfw-kv , graphql-mesh-cache-file , graphql-mesh-cache-inmemory-lru , graphql-mesh-cache-localforage , graphql-mesh-cache-redis , graphql-mesh-fusion-composition , graphql-mesh-fusion-runtime , graphql-mesh-graphql , graphql-mesh-grpc , graphql-mesh-http , graphql-mesh-merger-stitching , graphql-mesh-mongoose , graphql-mesh-mysql , graphql-mesh-odata , graphql-mesh-plugin-deduplicate-request , graphql-mesh-plugin-hive , graphql-mesh-plugin-http-cache , graphql-mesh-plugin-http-details-extensions , graphql-mesh-plugin-live-query , graphql-mesh-plugin-mock , graphql-mesh-plugin-newrelic , graphql-mesh-plugin-operation-field-permissions , graphql-mesh-plugin-rate-limit , graphql-mesh-plugin-response-cache , graphql-mesh-plugin-snapshot , graphql-mesh-plugin-statsd , graphql-mesh-runtime , graphql-mesh-store , graphql-mesh-supergraph , graphql-mesh-thrift , graphql-mesh-transform-cache , graphql-mesh-transform-encapsulate , graphql-mesh-transform-extend , graphql-mesh-transform-federation , graphql-mesh-transform-filter-schema , graphql-mesh-transform-hive , graphql-mesh-transform-hoist-field , graphql-mesh-transform-naming-convention , graphql-mesh-transform-prefix , graphql-mesh-transform-prune , graphql-mesh-transform-rate-limit , graphql-mesh-transform-rename , graphql-mesh-transform-replace-field , graphql-mesh-transform-resolvers-composition , graphql-mesh-transform-transfer-schema , graphql-mesh-transform-type-merging , graphql-mesh-transport-grpc , graphql-mesh-transport-mysql , graphql-mesh-transport-soap , graphql-mesh-transport-sqlite , graphql-mesh-transport-thrift , graphql-mesh-tuql , graphql-mesh-types , graphql-mesh-urql-exchange , graphql-mesh-utils , graphql-sequelize , graphql-tools , graphql-tools-code-file-loader , graphql-tools-executor-legacy-ws , graphql-tools-executor-yoga , graphql-tools-github-loader , graphql-tools-relay-operation-optimizer , graphql-tools-url-loader , graphql-upload , graphql-yoga , graphql-yoga-apollo-link , graphql-yoga-nestjs , graphql-yoga-nestjs-federation , graphql-yoga-plugin-apq , graphql-yoga-plugin-graphql-sse , graphql-yoga-plugin-sofa , grpc-node , grpc-reflection-js , happy-dom , happy-dom-node-canvas-adapter , happy-dom-server-renderer , hard-source-webpack-plugin , headers-polyfill , honeycomb-opentelemetry-js , hooks , html-webpack-plugin , http-proxy-middleware , httptoolkit-httpolyglot , httptoolkit-websocket-stream , huggingface-transformers , imagemin , inquirer-checkbox , inquirer-confirm , inquirer-core , inquirer-editor , inquirer-expand , inquirer-external-editor , inquirer-input , inquirer-number , inquirer-password , inquirer-prompts , inquirer-rawlist , inquirer-search , inquirer-select , inquirer-type , inquirer.js , ionic-cli , ionic-cli-framework , ionic-team/ionic-cli , ionic-utils-fs , ipx , isomorphic-dompurify , istanbuljs-nyc-config-typescript , it-length-prefixed , it-protocol-buffers , jayson , jest , jest-axe , jest-changed-files , jest-circus , jest-cli , jest-config , jest-console , jest-core , jest-create-cache-key-function , jest-diff , jest-diff-sequences , jest-docblock , jest-each , jest-environment , jest-environment-jsdom , jest-environment-jsdom-abstract , jest-environment-node , jest-expect , jest-expo , jest-fake-timers , jest-get-type , jest-globals , jest-haste-map , jest-jasmine2 , jest-leak-detector , jest-matcher-utils , jest-message-util , jest-mock , jest-phabricator , jest-pnp-resolver , jest-preset-angular , jest-regex-util , jest-repl , jest-reporters , jest-resolve , jest-resolve-dependencies , jest-runner , jest-runtime , jest-serializer , jest-snapshot , jest-snapshot-utils , jest-specific-snapshot , jest-test-result , jest-test-sequencer , jest-transform , jest-types , jest-util , jest-validate , jest-watch-typeahead , jest-watcher , js-genai , js-interfaces , js-libp2p , js-libp2p-bootstrap , js-libp2p-crypto , js-libp2p-kad-dht , js-multistream-select , js-peer-id , jsdoc-type-pratt-parser , jsdom , json-render , json-render-codegen , json-render-core , json-render-devtools , json-render-devtools-react , json-render-devtools-solid , json-render-devtools-svelte , json-render-devtools-vue , json-render-directives , json-render-image , json-render-ink , json-render-mcp , json-render-next , json-render-react , json-render-react-email , json-render-react-native , json-render-react-pdf , json-render-react-three-fiber , json-render-redux , json-render-remotion , json-render-shadcn , json-render-shadcn-svelte , json-render-solid , json-render-svelte , json-render-vue , json-render-xstate , json-render-yaml , json-render-zustand , jwks-rsa , karma , karma-browserstack-launcher , karma-jasmine , karma-junit-reporter , karma-requirejs , koa-body , koa-bodyparser , kubernetes-client-node , less-loader , libsql-client-ts , libsql-hrana-client , libsql-isomorphic-ws , lighthouse , livestore , livestore-utils-dev , livestore-webmesh , localforage-asyncstorage-driver , log-process-errors , lottie-react-native , magic-js , magiclabs/magic-js , manifest , masked-view , material-ui , mem-fs , mem-fs-editor , meros , metamask-account-tree-controller , metamask-accounts , metamask-address-book-controller , metamask-authenticated-user-storage , metamask-chomp-api-service , metamask-connect-solana , metamask-controller-utils , metamask-delegation-controller , metamask-error-reporting-service , metamask-eth-snap-keyring , metamask-keyring-controller , metamask-keyring-internal-snap-client , metamask-keyring-snap-client , metamask-keyring-snap-sdk , metamask-message-manager , metamask-money-account-upgrade-controller , metamask-multichain-account-service , metamask-multichain-network-controller , metamask-multichain-transactions-controller , metamask-network-controller , metamask-permission-controller , metamask-profile-sync-controller , metamask-ramps-controller , metamask-remote-feature-flag-controller , metamask-seedless-onboarding-controller , metamask-snaps-cli , metamask-snaps-controllers , metamask-snaps-execution-environments , metamask-snaps-jest , metamask-snaps-rollup-plugin , metamask-snaps-rpc-methods , metamask-snaps-sdk , metamask-snaps-simulation , metamask-snaps-utils , metamask-snaps-webpack-plugin , metro , metro-babel-transformer , metro-cache , metro-cache-key , metro-config , metro-core , metro-file-map , metro-inspector-proxy , metro-minify-terser , metro-react-native-babel-preset , metro-react-native-babel-transformer , metro-resolver , metro-runtime , metro-source-map , metro-symbolicate , metro-transform-plugins , metro-transform-worker , microsoft-365-agents-toolkit , mikro-orm , mikro-orm-cli , mikro-orm-core , mikro-orm-decorators , mikro-orm-entity-generator , mikro-orm-knex-compat , mikro-orm-libsql , mikro-orm-mariadb , mikro-orm-migrations , mikro-orm-migrations-mongodb , mikro-orm-mssql , mikro-orm-mysql , mikro-orm-oracledb , mikro-orm-pglite , mikro-orm-postgresql , mikro-orm-reflection , mikro-orm-seeder , mikro-orm-sql , mikro-orm-sqlite , mini-css-extract-plugin , miniflare , minimizer-webpack-plugin , mobile-wallet-protocol , mockttp , modern-js-app-tools , modern-js-babel-compiler , modern-js-babel-plugin-module-resolver , modern-js-babel-preset , modern-js-core , modern-js-flight-server-transform-plugin , modern-js-plugin-i18n , modern-js-prod-server , modern-js-rsbuild-plugin-esbuild , modern-js-server , modern-js-server-core , modern-js-server-utils , modern-js-uni-builder , modern-js-utils , module-federation-bridge-react-webpack-plugin , module-federation-bridge-shared , module-federation-bridge-vue3 , module-federation-core , module-federation-devtools , module-federation-dts-plugin , module-federation-error-codes , module-federation-managers , module-federation-modern-js , module-federation-nextjs-mf , module-federation-retry-plugin , module-federation-rsbuild-plugin , module-federation-runtime , module-federation-runtime-core , module-federation-runtime-tools , module-federation-storybook-addon , module-federation-third-party-dts-extractor , module-federation-webpack-bundler-runtime , module-federation/core , module-federation/vite , mongodb , mongodb-connection-string-url , mongoose , mqtt , mqtt-packet , msw , mui-codemod , mui-icons-material , mui-material , mui-material-pigment-css , mysql2 , native-run , neondatabase-serverless , nest , nestjs-cache-manager , nestjs-cls , nestjs-common , nestjs-core , nestjs-microservices , nestjs-platform-express , nestjs-platform-fastify , nestjs-platform-socket.io , nestjs-platform-ws , nestjs-testing , nestjs-throttler , netlify-build , netlify-cms , netlify-cms-app , netlify-cms-backend-gitlab , netlify-cms-core , netlify-cms-widget-markdown , netlify-dev , netlify-functions-dev , netlify-images , netlify-nuxt , netlify-opentelemetry-sdk-setup , netlify-runtime , netlify-vite-plugin , netlify-vite-plugin-tanstack-start , netlify/functions , newrelic-security-agent , nguniversal , nitro , npm:@aptos-labs/aptos-client , npm:@metamask/polling-controller , npm:@nestjs/sequelize , npm:@trezor/protobuf , null-loader , nuxt , nuxt-docs , nuxt-kit , nuxt-nitro-server , nuxt-rspack-builder , nuxt-schema , nuxt-vite-builder , nuxt-webpack-builder , ob1 , oclif/core , office-addin-manifest , office-addin-scripts , omnigraph-grpc , omnigraph-mysql , omnigraph-thrift , onflow-fcl-react-native , onnxruntime-web , op-sqlite , open-wc , open-wc-semantic-dom-diff , open-wc-testing-karma , openai-agents , openai-agents-extensions , openai-agents-js , openai-agents-openai , openai-agents-realtime , opencensus-node , openinference , opentelemetry-auto-instrumentations-node , opentelemetry-contrib-test-utils , opentelemetry-exporter-logs-otlp-grpc , opentelemetry-exporter-logs-otlp-http , opentelemetry-exporter-logs-otlp-proto , opentelemetry-exporter-metrics-otlp-grpc , opentelemetry-exporter-metrics-otlp-http , opentelemetry-exporter-metrics-otlp-proto , opentelemetry-exporter-trace-otlp-grpc , opentelemetry-exporter-trace-otlp-http , opentelemetry-exporter-trace-otlp-proto , opentelemetry-instrumentation-bunyan , opentelemetry-instrumentation-connect , opentelemetry-instrumentation-express , opentelemetry-instrumentation-grpc , opentelemetry-instrumentation-hapi , opentelemetry-instrumentation-ioredis , opentelemetry-instrumentation-koa , opentelemetry-instrumentation-long-task , opentelemetry-instrumentation-memcached , opentelemetry-instrumentation-mysql , opentelemetry-instrumentation-oracledb , opentelemetry-instrumentation-pg , opentelemetry-instrumentation-tedious , opentelemetry-js , opentelemetry-js-contrib , opentelemetry-opentelemetry-browser-detector , opentelemetry-operations-js , opentelemetry-otlp-exporter-base , opentelemetry-otlp-grpc-exporter-base , opentelemetry-otlp-proto-exporter-base , opentelemetry-otlp-transformer , opentelemetry-resource-detector-gcp , opentelemetry-sdk-logs , opentelemetry-sdk-node , opentelemetry-shim-opencensus , optimism , orval , orval-angular , orval-axios , orval-core , orval-effect , orval-fetch , orval-hono , orval-mcp , orval-mock , orval-pinia-colada , orval-query , orval-solid-start , orval-swr , otel , oven-sh/bun , parse5 , pg-sql2 , pi , pigment-css , pkgs , playwright-core , playwright-test , plugin-commands , plugins , portabletext-keyboard-shortcuts , portabletext-patches , postcss-loader , postgraphile , posthog-react-native-plugin , prefresh-webpack , pretty-format , prettyhtml , primitives , proto-loader , puppeteer , puppeteer-core , racejar , read-tls-client-hello , remark , remix , remix-run-server-runtime , retry-request , rollup , rollup-plugin-node-resolve , rollup-plugin-sourcemaps , rollup-plugin-terser , rollup-plugin-zephyr , rsbuild , rsbuild-core , rsbuild-plugin-css-minimizer , rsdoctor , rsdoctor-components , rsdoctor-core , rsdoctor-docs , rsdoctor-graph , rsdoctor-rspack-plugin , rsdoctor-sdk , rsdoctor-types , rsdoctor-utils , rsdoctor-webpack-plugin , rspack , rspack-binding , rspack-cli , rspack-test-tools , rules_nodejs , runtime-cli , rushstack , rushstack-debug-certificate-manager , rushstack-eslint-plugin-security , rushstack-hashed-folder-copy-plugin , rushstack-heft-node-rig , rushstack-heft-sass-plugin , rushstack-heft-web-rig , rushstack-heft-webpack4-plugin , rushstack-lockfile-explorer , rushstack-lookup-by-path , rushstack-rush-cli-client , rushstack-webpack5-localization-plugin , rushstack-webpack5-module-minifier-plugin , sanity , sanity-access-ui , sanity-cli , sanity-cli-build , sanity-codegen , sanity-diff , sanity-io/cli , sanity-mutator , sanity-schema , sanity-types , sanity-util , sanity-vision , sanity-workbench-cli , sass-loader , sb , scalar , scalar-agent-chat , scalar-api-client , scalar-api-client-react , scalar-api-reference , scalar-api-reference-react , scalar-json-magic , scalar-nuxt , scalar-openapi-parser , scalar-openapi-to-markdown , scalar-pre-post-request-scripts , scalar-release-notes , scalar-server-side-rendering , scalar-sidebar , scalar/scalar , sdk-typescript , selenium-standalone , selfsigned , sentry-browser , sentry-core , sentry-node , sequelize , sequelize-typescript , services , sitemap , slack-logger , slack-socket-mode , slack-web-api , socket.io , sort-package-json , source-map-loader , speedline , static-site-generator-webpack-plugin , storage , storybook , storybook-addon-docs , storybook-angular , storybook-builder-webpack5 , storybook-cli , storybook-codemod , storybook-core-webpack , storybook-ember , storybook-html-vite , storybook-nextjs , storybook-preact , storybook-preset-react-webpack , storybook-preset-server-webpack , storybook-react , storybook-react-dom-shim , storybook-react-vite , storybook-react-webpack5 , storybook-server , storybook-server-webpack5 , storybook-vue3 , storybook-vue3-vite , storybook-vue3-webpack5 , storybook-web-components , storybook-web-components-vite , storybook-web-components-webpack5 , strong-error-handler , style-loader , style-resources-loader , subfont , sveltejs-adapter-bun , sveltejs-kit , swarm-js , sync-request , tar-stream , teams.ts , tedious , temporalio-worker , terminus , testem , then-request , thread-loader , thrift-server , time-fix-plugin , trezor-connect-web , trezor-suite , ts-command-line , ts-jest , ts-loader , ts-node , tuql , types-accepts , types-bl , types-bunyan , types-cli-progress , types-co-body , types-convert-source-map , types-cookies , types-debounce , types-filewriter , types-formidable , types-graceful-fs , types-hoist-non-react-statics , types-jsdom , types-jsonwebtoken , types-k-bucket , types-koa , types-koa-compose , types-koa-etag , types-koa-send , types-koa-static , types-memcached , types-micromatch , types-minimatch , types-mysql , types-ndarray-ops , types-npm-package-arg , types-oracledb , types-path-is-inside , types-pbkdf2 , types-pg , types-pg-pool , types-pidusage , types-randombytes , types-readable-stream , types-recursive-readdir , types-request , types-rimraf , types-set-cookie-parser , types-shallow-equals , types-signal-exit , types-stream-buffers , types-string.prototype.matchall , types-tedious , types-through , types-unist , types-vfile-message , types-warning , types-which , types-yauzl , unctx , undici , unified , unocss , unocss-astro , unocss-autocomplete , unocss-eslint-config , unocss-eslint-plugin , unocss-extractor-mdc , unocss-extractor-pug , unocss-extractor-svelte , unocss-language-server , unocss-nuxt , unocss-preset-legacy-compat , unocss-preset-rem-to-px , unocss-runtime , unocss-svelte-scoped , unocss-twoslash , unocss-unocss , unocss-vite , unplugin , unstorage , url-loader , vanilla-extract , verdaccio , verdaccio-auth , verdaccio-loaders , verdaccio-logger , verdaccio-signature , verdaccio-utils , victory-native , virmator , vite , vite-node , vite-plugin-basic-ssl , vite-plugin-svelte , vite-plugin-tanstack-start-zephyr , vite-plugin-vinext-zephyr , vite-plugin-zephyr , vitefu , vitest , vitest-browser , vitest-browser-playwright , vitest-browser-preview , vitest-coverage-istanbul , vitest-coverage-v8 , vitest-expect , vitest-mocker , vitest-pretty-format , vitest-runner , vitest-snapshot , vitest-spy , vitest-ui , vitest-utils , vitest-web-worker , vitest-ws-client , volar-service-json , volar-service-pug , volar-service-pug-beautify , walletconnect-core , walletconnect-ethereum-provider , walletconnect-monorepo , walletconnect-sign-client , walletconnect-signer-connection , walletconnect-types , walletconnect-universal-provider , walletconnect-utils , wdio-appium-service , wdio-browser-runner , wdio-cli , wdio-concise-reporter , wdio-config , wdio-firefox-profile-service , wdio-globals , wdio-jasmine-framework , wdio-lighthouse-service , wdio-repl , wdio-runner , wdio-sauce-service , wdio-shared-store-service , wdio-smoke-test-reporter , wdio-static-server-service , wdio-sumologic-reporter , wdio-testingbot-service , wdio-types , wdio-utils , wdio-webdriver-mock-service , web , web-browser-logs , web-config-loader , web-dev-server , web-dev-server-core , web-dev-server-esbuild , web-dev-server-hmr , web-dev-server-import-maps , web-dev-server-legacy , web-dev-server-polyfill , web-dev-server-rollup , web-dev-server-storybook , web-infra-dev/modern.js , web-mocks , web-parse5-utils , web-storybook-framework-web-components , web-test-runner , web-test-runner-browserstack , web-test-runner-chrome , web-test-runner-commands , web-test-runner-core , web-test-runner-coverage-v8 , web-test-runner-junit-reporter , web-test-runner-mocha , web-test-runner-playwright , web-test-runner-puppeteer , web-test-runner-saucelabs , web-test-runner-selenium , web-test-runner-visual-regression , web-test-runner-webdriver , web3 , web3-bzz , web3-core , web3-core-helpers , web3-core-method , web3-core-promievent , web3-core-requestmanager , web3-core-subscriptions , web3-eth , web3-eth-accounts , web3-eth-contract , web3-eth-ens , web3-eth-iban , web3-eth-personal , web3-net , web3-providers-http , web3-providers-ipc , web3-providers-ws , web3-shh , web3-utils , web3.js , webdriver , webdriverio , webpack , webpack-cli , webpack-cli-configtest , webpack-cli-generators , webpack-cli-info , webpack-cli-serve , webpack-dev-middleware , webpack-dev-server , webpack-subresource-integrity , webpackbar , with-zephyr , wkx , worker-loader , workers-sdk , workflow , workflow-astro , workflow-builders , workflow-cli , workflow-core , workflow-nest , workflow-next , workflow-nuxt , workflow-rollup , workflow-sveltekit , workflow-vite , workflow-vitest , workflow-web , workflow-web-shared , workflow-world-local , workflow-world-postgres , workflow-world-testing , workflow-world-vercel , workflows , wry-context , wyw-in-js , xdm , xrpl-secret-numbers , yarnpkg-cli , yarnpkg-core , yarnpkg-extensions , yarnpkg-nm , yarnpkg-plugin-compat , yarnpkg-plugin-dlx , yarnpkg-plugin-essentials , yarnpkg-plugin-file , yarnpkg-plugin-github , yarnpkg-plugin-link , yarnpkg-plugin-npm-cli , yarnpkg-plugin-pnp , yarnpkg-plugin-pnpm , yarnpkg-plugin-workspace-tools , yarnpkg-sdks , yeoman-generator , yeoman/environment , zephyr-agent , zephyr-astro-integration , zephyr-edge-contract , zephyr-metro-plugin , zephyr-modernjs-plugin , zephyr-nuxt-module , zephyr-packages , zephyr-repack-plugin , zephyr-rolldown-plugin , zephyr-rsbuild-plugin , zephyr-rspack-plugin , zephyr-rspress-plugin , zephyr-webpack-plugin , zephyr-xpack-internal

Affected packages:

undici @ 7.28.0 (+6971 more)