Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
undici npm package can crash Node applications
published 5 days ago
Summary
The undici package used for WebSocket connections can cause a Node.js program to stop working completely. This can interrupt any service that relies on that package, leading to downtime. Update the package to the latest version or replace it with a different WebSocket library to prevent crashes.
What to do
- Update cleanstart npm to version 12.2.0-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | npm |
< 12.2.0-r0 Fix: upgrade to 12.2.0-r0
|
Original advisory text
undici's WebSocket client crashes the whole Node
Security vulnerability affects the npm package. undici's WebSocket client crashes the whole Node.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2026-PF52310 · OSV
Track software like this
Free during beta