CLSA-2026-1794675462: TuxCare security update for undici (8 CVEs)

Deploy undici version 7.21.0-tuxcare.1. This is the version identified as fixing the eight CVEs.

No individual CVE identifiers, affected-version ranges, exploit prerequisites, or configuration details are provided in the available advisory data.

Published Nov 14, 2026

Updated

TuxCare rebuilt undici to address 8 CVEs. Fixed in 7.21.0-tuxcare.1.

Affected Software

1 affected componentFixes available

tuxcare/undici>=7.21.0-tuxcare.0<7.21.0-tuxcare.1

7.21.0-tuxcare.1

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade tuxcare/undici to a version that resolves this vulnerability.
Fixed in 7.21.0-tuxcare.1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7.21.0-tuxcare.1

Nov 14, 2026

Advisory Published

via OSV·05:57 PM

Data Sourced

via OSV·05:57 PM

DescriptionAffected Software

Contains the following vulnerabilities.

Deploy undici version 7.21.0-tuxcare.1. This is the version identified as fixing the eight CVEs.

No individual CVE identifiers, affected-version ranges, exploit prerequisites, or configuration details are provided in the available advisory data.