UI5 / cli / 27931983303

94%

push

github

deps: Bump undici from 6.26.0 to 6.27.0 (#1424)

Bumps [undici](https://github.com/nodejs/undici) from 6.26.0 to 6.27.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/nodejs/undici/releases">undici's
releases</a>.</em></p>
<blockquote>
<h2>v6.27.0</h2>
<h1>⚠️ Security Release</h1>
<p>This release line addresses <strong>4 security
advisories</strong>.</p>
<blockquote>
<p><strong>Action required:</strong> Upgrade to <strong>undici
6.27.0</strong> or later.</p>
<pre lang="sh"><code>npm install undici@^6.27.0
</code></pre>
</blockquote>
<blockquote>
<p><strong>Note on patched version:</strong> the v6 fixes shipped in
<strong>v6.27.0</strong>, not <code>6.26.0</code>
— <code>v6.26.0</code> contains only the chunked-EOF fix (<a
href="https://redirect.github.com/nodejs/undici/issues/5308">#5308</a>)
and the version bump, none
of the security fixes below.</p>
</blockquote>
<p>The v6 line is <strong>not</strong> affected by the SOCKS5 advisories
(GHSA-vmh5-mc38-953g,
GHSA-hm92-r4w5-c3mj), the shared-cache disclosure (GHSA-pr7r-676h-xcf6),
or the
8.x-only WebSocket regression (GHSA-38rv-x7px-6hhq).</p>
<h2>Summary</h2>
<table>
<thead>
<tr>
<th>Advisory</th>
<th>CVE</th>
<th>Severity (CVSS)</th>
<th>Fixed in</th>
<th>Fix commit</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q">GHSA-vxpw-j846-p89q</a></td>
<td>CVE-2026-12151</td>
<td>High (7.5)</td>
<td>6.27.0</td>
<td><a
href="https://github.com/nodejs/undici/commit/b7f252e7"><code>b7f252e7</code></a></td>
</tr>
<tr>
<td><a
href="https://github.com/nodejs/undici/security/advisories/GHSA-p88m-4jfj-68fv">GHSA-p88m-4jfj-68fv</a></td>
<td>CVE-2026-9679</td>
<td>Moderate (5.9)</td>
<td>6.27.0</td>
<td><a
href="https://github.com/nodejs/undici/commit/25efa447"><code>25efa447</code></a></td>
</tr>
<tr>
<td><a
href="https://github.com/nodejs/undici/security/advisories/GHSA-g8m3-5g58-fq7m">GHSA-g8m3-5g58-fq7... (continued)

6485 of 7162 branches covered (90.55%)

Branch coverage included in aggregate %.

12416 of 12957 relevant lines covered (95.82%)

5754.86 hits per line