CLSA-2026-1793809357: TuxCare security update for undici (3 CVEs)

Q: How can I verify that the remediation has been applied?

Verify the installed undici package version. The advisory identifies 7.28.0-tuxcare.9 as the fixed build; it does not provide the affected version range or alternate remediation steps.

Published Nov 4, 2026

Updated

TuxCare rebuilt undici to address 3 CVEs. Fixed in 7.28.0-tuxcare.9.

Affected Software

1 affected componentFixes available

tuxcare/undici>=7.28.0-tuxcare.0<7.28.0-tuxcare.9

7.28.0-tuxcare.9

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade tuxcare/undici to a version that resolves this vulnerability.
Fixed in 7.28.0-tuxcare.9
Upgrade
Upgrade undici to a version that resolves this vulnerability.
Fixed in 7.28.0-tuxcare.9

Event History

Nov 4, 2026

Advisory Published

via OSV·05:22 PM

Data Sourced

via OSV·05:22 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

How can I verify that the remediation has been applied?

Verify the installed undici package version. The advisory identifies 7.28.0-tuxcare.9 as the fixed build; it does not provide the affected version range or alternate remediation steps.