We did a follow-up to Undici release https://nodejs.org/en/blog/vulnerability/march-2026-security-releases specifically for WebSocket max decompressed message size. nodejs/undici#4944.
We should update:
- Node 24 to Undici v7.25
- Node 22 to Undici v6.25
@nodejs/releasers should I send PRs here? Or shall we wait the next security release?
We did a follow-up to Undici release https://nodejs.org/en/blog/vulnerability/march-2026-security-releases specifically for WebSocket max decompressed message size. nodejs/undici#4944.
We should update:
@nodejs/releasers should I send PRs here? Or shall we wait the next security release?