NodeSource released a moderate-severity security fix for undici in version 7.29.1 and 8.10.2 to address a vulnerability via orphaned RetryHandler response body.
Public source
Publisher name
Public post
🚨 Moderate-severity security fix in undici (7.29.1, 8.10.2) just released! Patches CVE-2026-18149: undici vulnerable to Denial of Service via orphaned RetryHandler resp…
Company
NodeSource
N|Solid, the best tool for organizations to monitor Node.js applications, built by the Node experts. Know your Node.
- Industry
- Software Development
- Location
- Seattle, US
- Company size
- 11–50 employees
About NodeSource
NodeSource is dedicated to helping developers and organizations leverage the power of Node.js. We are Node Navigators. We help organizations & developers use Node to its fullest through N|Solid, the world's safest and most secure Node.js platform. Secure. Reliable. Extensible. NodeSource provides Node.js runtime security, enterprise-grade production Node.js support. From the Node company. #KnowyourNode
See moreLatest activity
Latest activity from NodeSource
27 signals
Research & Knowledge
NodeSource reports that N|Solid reached 1.15M downloads in 2026
Presence & Recognition
NodeSource employee Rafael Gonzaga is attending ParaÃbaJS 2026 in João Pessoa, Brazil.
Customers & Market
NodeSource reports that Solid Runtime has been downloaded more than 1.15 million times in 2026 so far, bringing the total downloads to 2.4M.
Discover more
Similar signals
Similar public activity from other companies.
Products & Services
Platformatic
Platformatic announced that Undici 8 and Node.js 26 default to HTTP/2 as soon as a server advertises it over ALPN, with no code changes required.
Products & Services
Aikido Security
Aikido Security introduced malware scanning on publish.
Products & Services
Bytebard
Bytebard added Vulnerability Exceptions to allow a package@version through even if it has a specific vulnerability.
Products & Services
Endor Labs
Endor Labs introduced Endor Patches, which apply security backports directly to older library versions to maintain compatibility and avoid breaking binary compatibility.
Products & Services
The Access Group