Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
GitHub Actions undici-types may be exploitable
published 11 days ago
Summary
The undici-types component used in GitHub Actions had a security weakness that could be taken advantage of by an attacker. It has been rebuilt and updated in version 6.20.0-tuxcare.2 to remove the risk. Apply the update as soon as possible to keep your workflows safe.
What to do
- Update GitHub Actions undici-types to version 6.20.0-tuxcare.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | GitHub Actions | undici-types |
>= 6.20.0-tuxcare.0, < 6.20.0-tuxcare.2 Fix: upgrade to 6.20.0-tuxcare.2
|
Original advisory text
TuxCare security update for undici-types (1 CVE)
TuxCare rebuilt undici-types to address 1 CVE. Fixed in 6.20.0-tuxcare.2.
Timeline
Published24 Oct 2026
Updated25 Oct 2026
First seen25 Oct 2026
Sources
CLSA-2026-1792867312 · OSV
Track software like this
Free during beta