CVE-2026-84961

About vulnerability

Impact

undici’s BalancedPool passes its constructor options through a JSON-based deep clone (JSON.parse(JSON.stringify(...))) before forwarding them to each per-upstream Pool. JSON cannot represent functions, so a caller-supplied connect or tls option containing a checkServerIdentity callback (or a custom connector function) is silently dropped before it reaches the TLS layer. As a result, a TLS peer whose certificate a custom checkServerIdentity was written to reject, but which passes Node’s default hostname and chain checks, is silently accepted when the request is made through BalancedPool. Client, Pool, Agent, and RoundRobinPool destructure connect/tls before the clone and are not affected. Only applications that use BalancedPool with a function-valued connect/tls option (such as a custom checkServerIdentity or connector) are affected.

Patches

Upgrade to 7.29.1 or 8.10.2. BalancedPool now preserves the connect and tls options outside the JSON clone, so custom TLS verification callbacks are forwarded to each upstream unchanged.

Workarounds

Use Client, Pool, or Agent instead of BalancedPool for connections that rely on a custom checkServerIdentity or connector, until upgraded.

Affected product:

0x-monorepo , @0x/subproviders , @boxd-sh/sdk , @connext/channel-provider , @connext/types , @dfinity/identity-secp256k1 , @elrondnetwork/erdjs , @graphql-cli/common , @helium/transactions , @keplr-wallet/cosmos , @keplr-wallet/types , @keplr-wallet/unit , @lg-tools/meta , @myx-trade/sdk , @portis/web3 , @portis/web3-provider-engine , @rnef/tools , @taquito/local-forging , @taquito/michelson-encoder , @taquito/rpc , @taquito/signer , @taquito/tzip16 , @taquito/utils , AlmaLinux 9.2 ESU , AngularJS , CopilotKit/CopilotKit , Express , Lodash , MetaMask/accounts , MetaMask/core , Next.js , Node.js , Polymer/tools , Protocol Buffers , React , RhysSullivan/executor , TanStack/router , TuxCare 9.6 ESU , TuxCare 9.8 ESU , Vue , a2a-js , a2a-js-sdk , adk-js , ag-ui-adk-js , agent-js , agents , agents-for-js , agents-js , ai , ai-sdk-harness-cline , amplify-js , analog , api , api-extractor-model , apollo , apollo-codegen-flow , apollo-codegen-scala , apollo-env , apollo-gateway , apollo-graphql , apollo-language-server , apollo-server , apollo-server-integration-koa , apollo-server-plugin-operation-registry , apollo-tooling , apollographql/apollo-client , aptos-core , aptos-labs-wallet-adapter-core , aptos-ts-sdk , arcjet-js , array-chunk-split , assistant-ui-react-native , astro , astrojs-cloudflare , astrojs-netlify , astrojs-react , async-storage , augment-vir-assert , authereum , automatic-vendor-sharing , aws-crt-nodejs , aws-encryption-sdk-javascript , aws-sdk-js-v3 , azion , azure-sdk-for-js , babel-loader , berry , bl , blockchain-link-utils , blocknote , blockstack.js , bluelovers-conventional-changelog-bluelovers , bluelovers/deepmerge , bluelovers/ws-iconv , bluelovers/ws-node-novel , bom-encoding , borsh , botbuilder-js , braintrust-temporal , broccoli , browser-sync , browsers , bufbuild/connect-es , buffer-image-size , buffer-layout-utils , bugsnag-js , bull-board-api , bundle-stats , cacheable-lookup , cardano-foundation-ledgerjs-hw-app-cardano , casper-js-sdk , celo-connect , celo-contractkit , centrifuge-js , chain-jslib , chain-jslib-nextgen , chainsafe-libp2p-noise , chat , chrome-launcher , chromedriver , chromium-edge-launcher , cjk-conv-cli , cjk-regex , clean-webpack-plugin , clerk-clerk-expo , clerk-clerk-js , clerk-expo , clerk-expo-biometrics , clerk-expo-google-signin , clerk-expo-passkeys , clients , cline , cloud-sdk-js , cloudflare-autoconfig , cloudflare-cli-shared-helpers , cloudflare-containers-shared , cloudflare-deploy-helpers , cloudflare-pages-shared , cloudflare-runtime-types , cloudflare-think , cloudflare-vitest-plugin , cloudflare-workers-auth , codeshift-core , coin-modules , colors-option , commitlint , commitlint-cz-commitlint , commitlint-prompt , commitlint-prompt-cli , composio , concordium-browser-wallet-api-helpers , concordium-node-sdk-js , confio-ics23 , confluent-kafka-javascript , connect-monorepo , connect-multichain , contentful-rich-text-from-markdown , copilotkit , copy-webpack-plugin , core , cosmiconfig-typescript-loader , cosmjs , cosmjs-types , cpy , craftzdog-react-native-buffer , create-react-app , crlf-normalize , crlf-normalize-stream , cross-spawn-extra , crystal , css-loader , css-minimizer-webpack-plugin , cypress , cypress-webpack-preprocessor , cz-cli , cz-conventional-changelog , datadog-datadog-api-client , datadog-metrics , datadog-mobile-react-navigation , db , dd-sdk-reactnative , debug-color2 , decap-cms , deepeval , definitelytyped , del , deps-resolver , dev-middleware , devcert , developer-tooling , device-sdk-ts , devtools , dfinity/agent-js , discord.js , discordjs/discord.js , dmg-license , dockerode , docsearch , docusaurus , docusaurus-babel , docusaurus-bundler , docusaurus-core , docusaurus-mdx-loader , docusaurus-module-type-aliases , docusaurus-plugin-content-blog , docusaurus-plugin-content-docs , docusaurus-plugin-content-pages , docusaurus-plugin-css-cascade-layers , docusaurus-plugin-debug , docusaurus-plugin-google-analytics , docusaurus-plugin-google-gtag , docusaurus-plugin-google-tag-manager , docusaurus-plugin-sitemap , docusaurus-plugin-svgr , docusaurus-preset-classic , docusaurus-search-local , docusaurus-theme-classic , docusaurus-theme-common , docusaurus-theme-mermaid , docusaurus-theme-search-algolia , docusaurus-types , docusaurus-utils , docusaurus-utils-common , docusaurus-utils-validation , docx , dom-testing-library , dot-values , dotansimha-graphql-yoga , dr.pogodin-react-native-fs , drizzle-orm , dxup-nuxt , e2b , ecosystem , edge-runtime , editor , effect , effect-platform-node-shared , electron-installer-common , electron-installer-debian , electron-installer-dmg , electron-installer-flatpak , electron-installer-redhat , electron-installer-snap , elevenlabs-react-native , ember-auto-import , ember-cli , ember-cli-babel , ember-test-waiters , ember.js , ember__application , embroider , emotion , endo-bundle-source , engine.io , env-run-path , enzyme-matchers , enzyme-to-json , epub-extract , epub-iconv , epub-iconv-segment , epub-maker2 , epub2 , error-stack2 , es-joy-jsdoccomment , esbuild-loader , eslint-loader , eslint-plugin-graphql , eslint-plugin-jest , eslint-plugin-jsdoc , eslint-plugin-lit-a11y , eslint-webpack-plugin , estimo , eth-block-tracker , eth-json-rpc-filters , eth-json-rpc-infura , eth-json-rpc-middleware , eth-sig-util , eth-tx-summary , ethereum-cryptography , ethereumjs-abi , ethereumjs-account , ethereumjs-block , ethereumjs-client , ethereumjs-evm , ethereumjs-monorepo , ethereumjs-statemanager , ethereumjs-trie , ethereumjs-tx , ethereumjs-vm , ethereumjs-wallet , ethereumjs/ethereumjs-monorepo , eve , evolution-sdk-devnet , executor , expect , expect-webdriverio , expo , expo-app-intents , expo-apple-authentication , expo-application , expo-audio , expo-av , expo-background-task , expo-barcode-scanner , expo-battery , expo-branch , expo-brightness , expo-build-properties , expo-calendar , expo-camera , expo-checkbox , expo-cli , expo-clipboard , expo-contacts , expo-dev-client , expo-dev-client-components , expo-dev-launcher , expo-dev-menu , expo-dev-menu-interface , expo-device , expo-document-picker , expo-file-system , expo-firebase-analytics , expo-firebase-core , expo-firebase-recaptcha , expo-glass-effect , expo-haptics , expo-html-elements , expo-image-loader , expo-image-picker , expo-insights , expo-local-authentication , expo-localization , expo-location , expo-mail-composer , expo-manifests , expo-maps , expo-media-library , expo-metro-file-map , expo-module-scripts , expo-next-adapter , expo-notifications , expo-permissions , expo-plugin-help , expo-processing , expo-pwa , expo-random , expo-screen-orientation , expo-secure-store , expo-sensors , expo-sms , expo-speech , expo-store-review , expo-stories , expo-system-ui , expo-tracking-transparency , expo-updates , expo-updates-interface , expo-vector-icons , expo-video , expo-video-thumbnails , expo-webpack-config , expo-yarn-workspaces , extract-bad-epub , extract-css-chunks-webpack-plugin , extract-zip , extrastat2 , facebook-lexical , facebook/jest , facebook/metro , federation , fetch , fetch-node-details , file-loader , file-system-cache , find-chrome-bin , find-up-paths , find-yarn-workspace-root , firebase , firebase-admin-node , firebase-functions , firebase-js-sdk , firebase-rules-unit-testing , firestore-compat , fixturify , flagsmith-js-client , fontace , forge , fork-ts-checker-webpack-plugin , friendly-errors-webpack-plugin , fs-symlink-extra , fs-target-file , fumadocs , fumadocs-graphql , fumadocs-openapi , fumapress , ganache-core , gapic-node-processing , gateway , gatsby , gatsby-cypress , gatsby-interface , gatsby-page-utils , gatsby-plugin-compile-es6-packages , gatsby-plugin-emotion , gatsby-plugin-fathom , gatsby-plugin-feed , gatsby-plugin-google-gtag , gatsby-plugin-guess-js , gatsby-plugin-less , gatsby-plugin-manifest , gatsby-plugin-netlify , gatsby-plugin-no-sourcemaps , gatsby-plugin-offline , gatsby-plugin-postcss , gatsby-plugin-preact , gatsby-plugin-preload-fonts , gatsby-plugin-react-helmet , gatsby-plugin-schema-snapshot , gatsby-plugin-sitemap , gatsby-plugin-subfont , gatsby-plugin-typography , gatsby-react-router-scroll , gatsby-remark-code-repls , gatsby-remark-embed-snippet , gatsby-remark-prismjs , gatsby-remark-responsive-iframe , gatsby-source-contentful , gatsby-source-drupal , gatsby-source-filesystem , gatsby-source-graphql , gatsby-source-shopify , gatsby-source-wordpress , gatsby-transformer-react-docgen , gatsby-transformer-remark , gatsby-transformer-sqip , gatsby-transformer-toml , gax-nodejs , get , get-workspaces , glimmer.js , globby , google-ai-generativelanguage , google-cloud-aiplatform , google-cloud-artifact-registry , google-cloud-bigquery , google-cloud-common , google-cloud-firestore , google-cloud-functions-framework , google-cloud-logging , google-cloud-monitoring , google-cloud-node , google-cloud-spanner-api , google-cloud-speech , google-cloud-storage , google-cloud-vertexai , google-maps-isochrones , google-oauth2-node , got , got-cjs , graph-builder , graphile-engine , graphiql , graphiql-plugin-doc-explorer , graphiql-plugin-explorer , graphiql-plugin-history , graphiql-react , graphiql-toolkit , graphql-code-generator , graphql-code-generator-community , graphql-config , graphql-hive-envelop , graphql-hive/console , graphql-inspector , graphql-inspector-github-loader , graphql-language-service-server , graphql-live-queries , graphql-mesh , graphql-mesh-grpc , graphql-mesh-transport-grpc , graphql-sequelize , graphql-tools , graphql-tools-executor-legacy-ws , graphql-tools-url-loader , graphql-upload , graphql-yoga , graphql-yoga-graphiql , grpc-gcp , grpc-node , grpc-reflection-js , guarded-fetch , guess , gutenberg , happy-dom , hard-source-webpack-plugin , headers-polyfill , hedera-sdk-js , helium-proto , hiero-sdk-js , hirosystems/stacks-blockchain-api , honeycomb-opentelemetry-js , hooks , html-loader , html-webpack-plugin , html-webpack-skip-assets-plugin , html-webpack-tags-plugin , http-proxy-middleware , httptoolkit-httpolyglot , httptoolkit-websocket-stream , huggingface-transformers , imagemin , import , imports-loader , impound , imvectordb , inngest , inngest-realtime , inngest-test , inquirer-checkbox , inquirer-confirm , inquirer-core , inquirer-expand , inquirer-external-editor , inquirer-number , inquirer-password , inquirer-rawlist , inquirer-search , inquirer-select , inquirer-type , inquirer.js , ionic-cli , ionic-cli-framework , ionic-team/ionic-cli , ionic-utils-fs , ipx , isomorphic-dompurify , istanbuljs-nyc-config-typescript , it-length-prefixed , it-protocol-buffers , jaydenseric/graphql-upload , jayson , jest , jest-axe , jest-chain-transform , jest-changed-files , jest-console , jest-create-cache-key-function , jest-dom , jest-each , jest-leak-detector , jest-phabricator , jest-pnp-resolver , jest-preset-angular , jest-process-manager , jest-repl , jest-resolve , jest-serializer , jest-specific-snapshot , jest-test-result , jest-watch-typeahead , jest-watcher , joshwooding-vite-plugin-react-docgen-typescript , journeyapps-react-native-quick-sqlite , js-genai , js-interfaces , js-libp2p , js-libp2p-bootstrap , js-libp2p-crypto , js-libp2p-kad-dht , js-multistream-select , js-peer-id , jsdoc-type-pratt-parser , jsdom , jsdom-extra , jsdom-url , json-render , jsontokens , just-bash , just-bash-executor , jwks-rsa , karma , karma-browserstack-launcher , karma-jasmine , karma-junit-reporter , karma-requirejs , keplr-wallet , key-encoder-js , kit , koa-body , koa-bodyparser , langchain-core , langfuse-js , langsmith , lazy-cacache , lazy-cjk-slugify , lazy-cjk-sort , lazy-random-random-core , leafygreen-ui , leafygreen-ui-date-picker , leafygreen-ui-testing-lib , ledger-live , ledgerhq-coin-bitcoin , ledgerhq-coin-icon , ledgerhq-coin-internet_computer , ledgerhq-coin-mina , ledgerhq-coin-module-boilerplate , ledgerhq-coin-solana , ledgerhq-coin-stacks , ledgerhq-coin-stellar , ledgerhq-coin-sui , ledgerhq-coin-tester-bitcoin , ledgerhq-coin-tester-solana , ledgerhq-coin-tester-tron , ledgerhq-coin-tezos , ledgerhq-coin-ton , ledgerhq-coin-xrp , ledgerhq-crypto-icons , ledgerhq-crypto-icons-ui , ledgerhq-device-transport-kit-react-native-hid , ledgerhq-hw-app-elrond , ledgerhq-hw-app-exchange , ledgerhq-hw-app-multiversx , ledgerhq-icons-ui , ledgerhq-live-cli , ledgerhq-live-common , ledgerhq-live-countervalues-react , ledgerhq-live-wallet , ledgerhq-native-ui , ledgerhq-react-ui , ledgerhq-wallet-pnl , ledgerjs , less-loader , lg-tools-cli , lg-tools-codemods , lg-tools-create , lg-tools-link , lg-tools-prompt-kit , lg-tools-slackbot , lg-tools-storybook-decorators , lg-tools-storybook-utils , lg-tools-test , lg-tools-validate , libsql-client-ts , libsql-hrana-client , libsql-isomorphic-fetch , libsql-isomorphic-ws , libsql-kysely-libsql , lighthouse , lingui-babel-plugin-extract-messages , lingui-babel-plugin-lingui-macro , lingui-cli , lingui-conf , lingui-core , lingui-format-po , lingui-react , lingui-vite-plugin , lit-labs-nextjs , lit/lit , livekit-react-native , livestore , loaders.gl , loaders.gl-3d-tiles , loaders.gl-compression , loaders.gl-zip , localforage-asyncstorage-driver , log-process-errors , logtape , lottie-react-native , lucide , lynx-js-config-rsbuild-plugin , lynx-js-css-extract-webpack-plugin , lynx-js-qrcode-rsbuild-plugin , lynx-js-rsbuild-plugin , lynx-stack , magic-js , magiclabs/magic-js , manifest , masked-view , mastra , mastra-arize , mastra-arthur , mastra-auth-better-auth , mastra-auth-clerk , mastra-auth-cloud , mastra-auth-okta , mastra-connect , mastra-daytona , mastra-deepeval , mastra-discord , mastra-google-cloud-pubsub , mastra-inngest , mastra-langfuse , mastra-longmemeval , mastra-mysql , mastra-observability , mastra-opencode , mastra-otel-bridge , mastra-sentry , mastra-spanner , mastra-teams , mastra-temporal , mastra-turso , mastra-valkey , mastra-valkey-streams , mastra-voice-google-gemini-live , mastra-weaviate , material-ui , mdx , mem-fs , mem-fs-editor , meros , metamask-account-tree-controller , metamask-accounts , metamask-assets-controller , metamask-assets-controllers , metamask-bridge-controller , metamask-bridge-status-controller , metamask-chain-controller , metamask-chomp-api-service , metamask-claims-controller , metamask-client-utils , metamask-connect-solana , metamask-core , metamask-earn-controller , metamask-eip-5792-middleware , metamask-ens-controller , metamask-eth-snap-keyring , metamask-gator-permissions-controller , metamask-logging-controller , metamask-money-account-upgrade-controller , metamask-multichain-account-service , metamask-multichain-api-middleware , metamask-multichain-network-controller , metamask-multichain-transactions-controller , metamask-name-controller , metamask-network-enablement-controller , metamask-notification-services-controller , metamask-perps-controller , metamask-preferences-controller , metamask-profile-controller , metamask-profile-metrics-controller , metamask-queued-request-controller , metamask-ramps-controller , metamask-sample-controllers , metamask-shield-controller , metamask-signature-controller , metamask-smart-transactions-controller , metamask-snaps-cli , metamask-snaps-jest , metamask-snaps-rollup-plugin , metamask-snaps-simulation , metamask-snaps-simulator , metamask-snaps-webpack-plugin , metamask-social-controllers , metamask-subscription-controller , metamask-test-snaps , metamask-transaction-pay-controller , metamask-user-operation-controller , metamask-wallet , metro , microsoft-365-agents-toolkit , microsoft/botbuilder-js , migrate , mikro-orm , mini-css-extract-plugin , miniflare , minimizer-webpack-plugin , mobile-wallet-adapter , mobile-wallet-protocol , modern.js , module-federation-core , module-federation-nextjs-mf , module-federation-storybook-addon , module-federation-typescript , module-federation/core , module-federation/vite , mongodb , mongodb-connection-string-url , mongodb-js-mocha-config-devtools , mongodb-js-node-webpack-startup-snapshot-checker , mongodb-js-sbom-tools , mongoose , monorepo , mqtt , mqtt-packet , msw , multiversx-sdk-core , mysql2 , mysten-codegen , mysten-create-dapp , mysten-docs , native-html-css-processor , native-html-transient-render-engine , native-run , nativewind , neondatabase-serverless , nest , nestjs-cache-manager , nestjs-cls , nestjs-jwt , nestjs-throttler , netlify-build , netlify-cms , netlify-cms-app , netlify-cms-backend-gitlab , netlify-cms-core , netlify-cms-widget-markdown , netlify-dev , netlify-functions-dev , netlify-nuxt , netlify-opentelemetry-sdk-setup , netlify-runtime , netlify-vite-plugin , netlify-vite-plugin-tanstack-start , netlify/functions , newrelic-security-agent , nguniversal , nice-grpc , nice-grpc-error-details , nice-grpc-server-reflection , nitro , notionhq-client , novel-epub , novel-text , novel-txt-merge , npm-init2 , npm:@aptos-labs/aptos-client , npm:@metamask/money-account-utils , npm:@metamask/polling-controller , npm:@metamask/sentinel-api-service , npm:@nestjs/sequelize , npm:@pnpm/exec.lifecycle , npm:@pnpm/exec.prepare-package , npm:@trezor/protobuf , npm:modal , null-loader , nuxt , oclif-plugin-warn-if-update-available , oclif/core , octanejs-docusaurus , octokit , octokit-app , octokit-auth-app , octokit-auth-probot , office-addin-manifest , office-addin-scripts , okta-sdk-nodejs , omnigraph-grpc , onflow-fcl-react-native , onnxruntime-web , op-sqlite , open-wc , open-wc-building-rollup , open-wc-building-webpack , open-wc-demoing-storybook , open-wc-dev-server-hmr , open-wc-eslint-config , open-wc-semantic-dom-diff , open-wc-testing , open-wc-testing-karma , openai , openai-agents-js , opencensus-node , openinference , openllmetry-js , openloginsdk , opentelemetry-auto-instrumentations-node , opentelemetry-exporter-logs-otlp-grpc , opentelemetry-exporter-logs-otlp-http , opentelemetry-exporter-logs-otlp-proto , opentelemetry-exporter-metrics-otlp-grpc , opentelemetry-exporter-metrics-otlp-http , opentelemetry-exporter-metrics-otlp-proto , opentelemetry-exporter-trace-otlp-grpc , opentelemetry-exporter-trace-otlp-http , opentelemetry-exporter-trace-otlp-proto , opentelemetry-instrumentation-bunyan , opentelemetry-instrumentation-connect , opentelemetry-instrumentation-express , opentelemetry-instrumentation-hapi , opentelemetry-instrumentation-ioredis , opentelemetry-instrumentation-koa , opentelemetry-instrumentation-memcached , opentelemetry-instrumentation-mysql , opentelemetry-instrumentation-oracledb , opentelemetry-instrumentation-pg , opentelemetry-instrumentation-tedious , opentelemetry-js , opentelemetry-js-contrib , opentelemetry-operations-js , opentelemetry-otlp-exporter-base , opentelemetry-otlp-grpc-exporter-base , opentelemetry-otlp-proto-exporter-base , opentelemetry-sdk-node , optimism , orama-orama , orval , otel , oven-sh/bun , panda , parse5 , patch-project , path-dir-normalize , path-env , path-in-dir , path-parents , percy-cli , percy-cli-app , percy-cli-build , percy-cli-command , percy-cli-config , percy-cli-doctor , percy-cli-exec , percy-cli-snapshot , percy-cli-upload , percy-core , pi , pi-mcp-adapter , pigment-css , pkg-utils , pkgjs-nv , pkgs , playwright , playwright-chromium , playwright-core , playwright-test , plop , plugin-commands , plugin-help , plugins , pm-tools , pnpm , pnpm-auth.commands , pnpm-cli.default-reporter , pnpm-deps.compliance.audit , pnpm-deps.compliance.sbom , pnpm-deps.status , pnpm-fetching.binary-fetcher , pnpm-hooks.types , pnpm-installing.client , pnpm-installing.linking.modules-cleaner , pnpm-lockfile.fs , pnpm-lockfile.make-dedicated-lockfile , pnpm-lockfile.settings-checker , pnpm-pkg-manifest.commands , pnpm-pnpr.client , pnpm-worker , polkadot-api , polkadot-api-docgen , polkadot-api/polkadot-api , polkadot-js-common , polkadot-js/api , polkadot-js/wasm , polkadot-keyring , polkadot-networks , polkadot-util , polkadot-x-fetch , polkadot-x-global , polkadot-x-randomvalues , polkadot-x-textdecoder , polkadot-x-textencoder , polkadot-x-ws , postcss-loader , postgraphile , posthog-react-native-plugin , powersync-nuxt , powersync-op-sqlite , powersync-react-native , pprof , pptr-testing-library , preferred-pm , prefresh-webpack , pretty-format , prettyhtml , primitives , prisma , prisma-adapter-pg , probe.gl , probot , probot/pino , progress-bar-webpack-plugin , progress-webpack-plugin , proto-loader , proto3-json-serializer-nodejs , puppeteer , purgecss-webpack-plugin , qdrant-js-client-rest , random-extra , raw-loader , read-tls-client-hello , recyclerlistview , regexp-cjk-plugin-escape-unicode-property , regexp-cjk-regex-iterator , regexp-cjk-regexpu-core-v5 , regexp-class-to-regenerate , release-it , remark , remix , remotion , repack , retry-request , rna , rock , rollup , rollup-plugin-babel , rollup-plugin-node-resolve , rollup-plugin-sourcemaps , rollup-plugin-stats , rollup-plugin-terser , rollup-plugin-webpack-stats , rollup-plugin-workbox , rpc-websockets , rsbuild , rsbuild-core , rsbuild-plugin-css-minimizer , rsbuild-plugin-type-check , rsbuild-plugin-vue , rsdoctor , rsdoctor-core , rsdoctor-graph , rsdoctor-rspack-plugin , rsdoctor-sdk , rsdoctor-types , rsdoctor-utils , rspack , rspack-dev-server , rspress , rules_nodejs , runtime-cli , rushstack , rushstack-hashed-folder-copy-plugin , rushstack-heft-node-rig , rushstack-heft-rspack-plugin , rushstack-heft-static-asset-typings-plugin , rushstack-heft-vscode-extension-plugin , rushstack-heft-vscode-extension-rig , rushstack-heft-web-rig , rushstack-heft-webpack4-plugin , rushstack-lockfile-explorer , rushstack-package-extractor , rushstack-stream-collator , rushstack-webpack-workspace-resolve-plugin , rushstack-webpack5-localization-plugin , rushstack-webpack5-module-minifier-plugin , rxdb , sandbox , sanity , sanity-cli , sanity-cli-build , sanity-codegen , sanity-io/cli , sanity-preview-url-secret , sanity-template-validator , sanity-vercel-protection-bypass , sanity-workbench-cli , sass-loader , scalar , scalar-agent-chat , scalar-api-client , scalar-api-client-react , scalar-api-reference-react , scalar-docusaurus , scalar-json-magic , scalar-nuxt , scalar-openapi-parser , scalar-openapi-to-markdown , scalar-pre-post-request-scripts , scalar-server-side-rendering , scalar-sidebar , scalar/scalar , sdk-typescript , secretjs , secretlint , selenium-standalone , selfsigned , sentry-aws-serverless , sentry-browser , sentry-bun , sentry-electron , sentry-javascript , sentry-javascript-bundler-plugins , sentry-nestjs , sentry-nextjs , sentry-nuxt , sentry-profiling-node , sentry-react-router , sentry-remix , sentry-sveltekit , sentry-webpack-plugin , sequelize , sequelize-typescript , services , shanghaikid-parquetjs , shopify-flash-list , sitemap , size-limit , size-plugin , slack-bolt , slack-logger , slack-oauth , slack-socket-mode , slack-web-api , slorber-static-site-generator-webpack-plugin , smooth-code/jest-puppeteer , snaps , snowplow-javascript-tracker , socket.io , soda-friendly-errors-webpack-plugin , solana-connector , solana-mobile-mobile-wallet-adapter-protocol-kit , solana-program-library , solana-wallet-adapter-example , solana-web3.js , solidjs-start , sort-package-json , source-map-loader , speedline , split-smartly2 , splitsoftware-splitio-commons , squarelink-web3 , stacks.js , static-site-generator-webpack-plugin , statoscope , stellar-sdk , storage , storybook , storybook-addon-performance , storybook-addon-webpack5-compiler-swc , storybook-addons , storybook-api , storybook-jest , str-util , strapi , string-replace-loader , strong-error-handler , stx-labs-stacks.js , style-loader , style-resources-loader , styled-components , styleguide , subfont , sveltejs-adapter-bun , svg-url-loader , svgicons2svgfont , svgr , swarm-js , swc-jest , swc-node-loader , swc-plugin , swc-project/plugins , sync-request , tailwindcss , tanstack-ai-gemini , tanstack-ai-sandbox-boxd , tanstack-ai-sandbox-daytona , tanstack-ai-vertex , tanstack-react-query , tanstack-rxdb-db-collection , taquito , tar-stream , teams.ts , tedious , telemetry , terminus , testem , theme-ui , then-request , thread-loader , thrift-server , time-fix-plugin , tiptap , tools , torus-embed , trezor-suite , ts-command-line , ts-jest , ts-loader , ts-node , ts-sdks , ts-type , tsoa-runtime , tuql , turbo-gen , turbo-workspaces , turso , type-graphql , types-accepts , types-brotli , types-bunyan , types-cli-progress , types-co-body , types-cookies , types-docker-modem , types-dockerode , types-duplexify , types-es-aggregate-error , types-formidable , types-graceful-fs , types-jsonwebtoken , types-koa , types-koa-compose , types-liftoff , types-memcached , types-multer , types-mysql , types-oracledb , types-passport , types-passport-strategy , types-pbkdf2 , types-pg , types-pg-pool , types-plist , types-pumpify , types-readable-stream , types-recursive-readdir , types-request , types-set-cookie-parser , types-tedious , types-through , types-vfile-message , types-wait-on , types-xml-encryption , types-xml2js , types-yauzl , typescript-client , typia , unctx , undici , unhead , unified , unimport , universal-github-app-jwt , unocss , unocss-unocss , unocss-vite , unplugin , unstorage , upath2 , uppy-companion , url-loader , valkey-glide , value-from-record , vanilla-extract , vercel , vercel-client , verdaccio , victory-native , vinxi , vinyl-file , virmator , vite , vite-dev-rpc , vite-hot-client , vite-node , vite-plugin-babel , vite-plugin-basic-ssl , vite-plugin-checker , vite-plugin-inspect , vite-plugin-react , vite-plugin-rnw , vite-plugin-singlefile , vite-plugin-solid , vite-plugin-svelte , vite-plugin-vue , vite-plugin-vue-tracer , vite-tsconfig-paths , vitefu , vitejs-plugin-react-swc , vitest , vitest-axe , waku , wallet-adapter , wallet-standard , wallet-ui , walletconnect-monorepo , walletconnect-utils , walletconnect/walletconnect-monorepo , wasm , wdio-appium-service , wdio-cli , wdio-devtools-script , wdio-electron-service , wdio-elements , wdio-globals , wdio-repl , wdio-runner , wdio-types , web , web-dev-server , web-dev-server-core , web-dev-server-esbuild , web-dev-server-import-maps , web-dev-server-polyfill , web-dev-server-storybook , web-infra-dev/modern.js , web-mocks , web-storybook-builder , web-test-runner-browserstack , web-test-runner-module-mocking , web-test-runner-playwright , web-test-runner-saucelabs , web3-provider-engine , web3-react , web3.js , web3auth , web3auth-web , web3providerengine , webdriverio , webdriverio/devtools , webpack , webpack-assets-manifest , webpack-cli , webpack-cli-configtest , webpack-cli-generators , webpack-cli-info , webpack-cli-serve , webpack-dev-middleware , webpack-dev-server , webpack-manifest-plugin , webpack-subresource-integrity , webpackbar , wkx , wordpress-e2e-test-utils-playwright , wordpress-e2e-tests , wordpress-env , wordpress-eslint-plugin , wordpress-playground , wordpress-scripts , workbox , worker , worker-loader , workers-sdk , workflow , workflow-world-postgres , workflows , wry-context , ws-error , ws-git-lazy , ws-glob , ws-http , ws-iconv , ws-jest , ws-jsdom-extra , ws-node-novel , ws-random , ws-regexp , ws-rest , ws-segment , ws-string , ws-ts-type , ws-yarn-workspaces , wyw-in-js , x402 , xdl , xdm , xregexp-plugin-hanzi-cjk , xrpl , xrpl-secret-numbers , yarn-tool-check-pkg-bin , yarn-tool-env-path , yarnpkg-plugin-compat , yarnpkg-plugin-npm-cli , yarnpkg-plugin-pnp , yarnpkg-sdks , yeoman-adapter , yeoman-api , yeoman-generator , yeoman/environment , zbsearch , zeit-fetch , zen-fs/streams , zenfs-core , zephyr-packages , zeroentropy , zilliz-milvus2-sdk-node

Affected packages:

lucide @ 1.52.0 (+33222 more)