Skip to content

@angular-devkit/build-angular 17 uses vulnerable undici 6.11.1 #30066

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
1 task
SymbioticKilla opened this issue Apr 8, 2025 · 2 comments
Closed
1 task

@angular-devkit/build-angular 17 uses vulnerable undici 6.11.1 #30066

SymbioticKilla opened this issue Apr 8, 2025 · 2 comments
Assignees
Labels

Comments

@SymbioticKilla
Copy link

Command

version

Is this a regression?

  • Yes, this behavior used to work in the previous version

The previous version in which this bug was not present was

No response

Description

Hi,
is it possible to update it to 6.21.1?
https://nvd.nist.gov/vuln/detail/CVE-2025-22150

Thanks!

Minimal Reproduction

package.json

Exception or Error


Your Environment

17.3.15

Anything else relevant?

No response

@alan-agius4
Copy link
Collaborator

Closed via #30071

@angular-automatic-lock-bot
Copy link

This issue has been automatically locked due to inactivity.
Please file a new issue if you are encountering a similar or related problem.

Read more about our automatic conversation locking policy.

This action has been performed automatically by a bot.

@angular-automatic-lock-bot angular-automatic-lock-bot bot locked and limited conversation to collaborators May 10, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

No branches or pull requests

2 participants