ROOT-APP-NPM-CVE-2026-16729 CVE-2026-16729 in undici - Patched by Root

Root has patched CVE-2026-16729 in the undici package for Root:npm. Multiple fixed versions available...

3xhaustpi (>=0.1.3, <=0.2.1), @0x0.bug/pi-coding-agent (1.0.0) +1025 more potentially affected by CVE-2026-16729 via undici (>=8.0.0, <=8.8.0)

undici NPM version =8.0.0, =0.1.3, =0.1.0, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.1.0, =0.5.1 and more Source cves: CVE-2026-16729 Source...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +954 more potentially affected by CVE-2026-16729 via undici (>=7.0.0, <=7.28.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.0.6, =0.18.1, =0.18.4, =0.18.4, =0.1.0, =0.1.0, =0.26.4, =0.0.33, =0.3.2 and more Source cves: CVE-2026-16729 Source advisory: OSV:GHSA-V3R7-H72X-CJCM...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2114 more potentially affected by CVE-2026-16729 via undici (>=6.0.0, <=6.27.0)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =1.3.7-canary.36.1, =4.5.8, =4.5.8, =4.5.8, =4.5.8, =4.3.3, =1.0.0, =1.0.0, =2.1.1 and more Source cves: CVE-2026-16729 Source advisory: OSV:GHSA-V3R7-H72X-CJCM...

3xhaustpi (>=0.1.3, <=0.2.1), @0x0.bug/pi-coding-agent (1.0.0) +1025 more potentially affected by CVE-2026-16729 via undici (>=8.0.0, <=8.8.0)

undici NPM version =8.0.0, =0.1.3, =0.1.0, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.1.0, =0.5.1 and more Source cves: CVE-2026-16729 Source...

0utmailauth (1.0.0), @1023-ventures/ursa-core (>=0.5.2, <=0.5.3) +2114 more potentially affected by CVE-2026-16729 via undici (>=6.0.0, <=6.27.0)

undici NPM version =6.0.0, =0.5.2, =0.5.2, =0.4.2, =0.5.116, =1.3.7-canary.36.1, =4.5.8, =4.5.8, =4.5.8, =4.5.8, =4.3.3, =1.0.0, =1.0.0, =2.1.1 and more Source cves: CVE-2026-16729 Source advisory: SNYK:JS-UNDICI-18426061...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +954 more potentially affected by CVE-2026-16729 via undici (>=7.0.0, <=7.28.0)

undici NPM version =7.0.0, =0.1.1, =0.0.1-251008.90016, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.0.6, =0.18.1, =0.18.4, =0.18.4, =0.1.0, =0.1.0, =0.26.4, =0.0.33, =0.3.2 and more Source cves: CVE-2026-16729 Source advisory: SNYK:JS-UNDICI-18426061...

CVE-2026-16729

creationtimestamp| type| source ---|---|--- 2026-07-29 16:49:58+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mrsezgdb522c 2026-08-04 12:01:04+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3msaxodedyc2o 2026-08-04 13:32:13+00:00| seen|...