Skip to content

@angular-devkit/build-angular 17 uses vulnerable undici 6.11.1 #30066

@SymbioticKilla

Description

@SymbioticKilla

Command

version

Is this a regression?

  • Yes, this behavior used to work in the previous version

The previous version in which this bug was not present was

No response

Description

Hi,
is it possible to update it to 6.21.1?
https://nvd.nist.gov/vuln/detail/CVE-2025-22150

Thanks!

Minimal Reproduction

package.json

Exception or Error


Your Environment

17.3.15

Anything else relevant?

No response

Metadata

Metadata

Assignees

Type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions