ROOT-APP-NPM-CVE-2026-85152 CVE-2026-85152 in undici - Patched by Root

Root has patched CVE-2026-85152 in the undici package for Root:npm. Multiple fixed versions available...

@37chengshan/ompweb (>=0.3.5, <=5.1.9), @abox-dev/cli (>=0.1.0, <=0.2.1) +231 more potentially affected by CVE-2026-85152 via undici (>=8.10.0, <=8.10.1)

undici NPM version =8.10.0, =0.3.5, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.8.9, =1.0.0, =1.0.4, =1.0.0, =1.0.4, =1.0.0, =1.0.4, =1.0.0, =0.79.0, =0.85.0 and more Source cves: CVE-2026-85152 Source advisory: OSV:GHSA-VP8M-P9JH-Q5PM...

@37chengshan/ompweb (>=0.3.5, <=5.1.9), @abox-dev/cli (>=0.1.0, <=0.2.1) +231 more potentially affected by CVE-2026-85152 via undici (>=8.10.0, <=8.10.1)

undici NPM version =8.10.0, =0.3.5, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.8.9, =1.0.0, =1.0.4, =1.0.0, =1.0.4, =1.0.0, =1.0.4, =1.0.0, =0.79.0, =0.85.0 and more Source cves: CVE-2026-85152 Source advisory: GHSA-VP8M-P9JH-Q5PM...

CVE-2026-85152

creationtimestamp| type| source ---|---|--- 2026-09-04 16:39:00+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mupfnuxjnc2w...

@37chengshan/ompweb (>=0.3.5, <=5.1.9), @abox-dev/cli (>=0.1.0, <=0.2.1) +231 more potentially affected by CVE-2026-85152 via undici (>=8.10.0, <=8.10.1)

undici NPM version =8.10.0, =0.3.5, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.8.9, =1.0.0, =1.0.4, =1.0.0, =1.0.4, =1.0.0, =1.0.4, =1.0.0, =0.79.0, =0.85.0 and more Source cves: CVE-2026-85152 Source advisory: MEND:CVE-2026-85152...