A vulnerability (CVE-2026-84961) was discovered in the undici package for Root:npm. The issue has been patched by Root, and multiple fixed versions are now available. The patch addresses a security concern that may impact users of the undici package, which is used for creating HTTP/2 and HTTP/3 clients.