NodeSource released a low-severity security fix for undici in version 7.29.1 and 8.10.2 to address vulnerabilities in caching and replay of unsafe HTTP method responses.
Public source
Publisher name
Public post
🚨 Low-severity security fix in undici (7.29.1, 8.10.2) just released! Patches CVE-2026-85008: undici vulnerable to caching and replay of unsafe HTTP method responses ht…
Company
NodeSource
N|Solid, the best tool for organizations to monitor Node.js applications, built by the Node experts. Know your Node.
- Industry
- Software Development
- Location
- Seattle, US
- Company size
- 11–50 employees
About NodeSource
NodeSource is dedicated to helping developers and organizations leverage the power of Node.js. We are Node Navigators. We help organizations & developers use Node to its fullest through N|Solid, the world's safest and most secure Node.js platform. Secure. Reliable. Extensible. NodeSource provides Node.js runtime security, enterprise-grade production Node.js support. From the Node company. #KnowyourNode
See moreLatest activity
Latest activity from NodeSource
27 signals
Research & Knowledge
NodeSource reports that N|Solid reached 1.15M downloads in 2026
Presence & Recognition
NodeSource employee Rafael Gonzaga is attending ParaÃbaJS 2026 in João Pessoa, Brazil.
Customers & Market
NodeSource reports that Solid Runtime has been downloaded more than 1.15 million times in 2026 so far, bringing the total downloads to 2.4M.
Discover more
Similar signals
Similar public activity from other companies.
Products & Services
Platformatic
Platformatic announced that Undici 8 and Node.js 26 default to HTTP/2 as soon as a server advertises it over ALPN, with no code changes required.
Products & Services
Aikido Security
Aikido Security introduced malware scanning on publish.
Products & Services
Bytebard
Bytebard added Vulnerability Exceptions to allow a package@version through even if it has a specific vulnerability.
Products & Services
The Access Group
The Access Group published a security advisory for CVE-2026-86253 for h3 on September 6, noting that percent-encoded traversal sequences reaching serveStatic() can allow unauthenticated arbitrary file reads on affected Node.js deployments.
Products & Services
Ossprey Security