From ca86a164bdc73302d2fa6f5b0df84587493c8c23 Mon Sep 17 00:00:00 2001
From: Harsh Vardhan Gupta <harsh.gupta@mem0.ai>
Date: Fri, 19 Jun 2026 16:21:18 +0530
Subject: [PATCH] fix(pi-agent-plugin): resolve undici CVE-2026-9697 /
 CVE-2026-9678 (#5669)

---
 integrations/pi-agent-plugin/package.json        | 3 ++-
 integrations/pi-agent-plugin/pnpm-lock.yaml      | 9 +++++----
 integrations/pi-agent-plugin/pnpm-workspace.yaml | 1 +
 3 files changed, 8 insertions(+), 5 deletions(-)

diff --git a/integrations/pi-agent-plugin/package.json b/integrations/pi-agent-plugin/package.json
index 9748245f3..682bf1f72 100644
--- a/integrations/pi-agent-plugin/package.json
+++ b/integrations/pi-agent-plugin/package.json
@@ -73,7 +73,8 @@
     "overrides": {
       "form-data@<4.0.6": ">=4.0.6",
       "uuid@<11.1.1": ">=11.1.1",
-      "esbuild": ">=0.28.1"
+      "esbuild": ">=0.28.1",
+      "undici@>=8.0.0 <8.5.0": ">=8.5.0"
     }
   }
 }
diff --git a/integrations/pi-agent-plugin/pnpm-lock.yaml b/integrations/pi-agent-plugin/pnpm-lock.yaml
index 13d550563..041a9ee56 100644
--- a/integrations/pi-agent-plugin/pnpm-lock.yaml
+++ b/integrations/pi-agent-plugin/pnpm-lock.yaml
@@ -8,6 +8,7 @@ overrides:
   form-data@<4.0.6: '>=4.0.6'
   uuid@<11.1.1: '>=11.1.1'
   esbuild: '>=0.28.1'
+  undici@>=8.0.0 <8.5.0: '>=8.5.0'
 
 importers:
 
@@ -2354,8 +2355,8 @@ packages:
     resolution: {integrity: sha512-4yqz8a3n5HmGTlsbADNtr/dJlhkh/55Rq798G6ibiULcXbDtaLpTl1pvdqcbFfeoj3iSi52lePFM7h9H21cw/A==}
     engines: {node: '>=18.17'}
 
-  undici@8.3.0:
-    resolution: {integrity: sha512-TkUDgb6tl7KOGZ+7e8E3d2FYgUQgF6z5YypqjWmixVQSQERFcVrVg0ySADm2LVLRh5ljAaHTCR5Fmz3Q34rB7Q==}
+  undici@8.5.0:
+    resolution: {integrity: sha512-xamtWoB1EshgjpmlXd7GGm2VfdDtw1+rD8uhry8pSNW3If6S8E0m2T2+orSKeZXEn/aPJMviCpDBA65WJt8zhg==}
     engines: {node: '>=22.19.0'}
 
   util-deprecate@1.0.2:
@@ -2938,7 +2939,7 @@ snapshots:
       minimatch: 10.2.5
       proper-lockfile: 4.1.2
       typebox: 1.1.38
-      undici: 8.3.0
+      undici: 8.5.0
       yaml: 2.9.0
     optionalDependencies:
       '@mariozechner/clipboard': 0.3.9
@@ -4895,7 +4896,7 @@ snapshots:
 
   undici@6.26.0: {}
 
-  undici@8.3.0: {}
+  undici@8.5.0: {}
 
   util-deprecate@1.0.2: {}
 
diff --git a/integrations/pi-agent-plugin/pnpm-workspace.yaml b/integrations/pi-agent-plugin/pnpm-workspace.yaml
index 8ade9e801..c7dec97ab 100644
--- a/integrations/pi-agent-plugin/pnpm-workspace.yaml
+++ b/integrations/pi-agent-plugin/pnpm-workspace.yaml
@@ -5,3 +5,4 @@ overrides:
   "form-data@<4.0.6": ">=4.0.6"
   "uuid@<11.1.1": ">=11.1.1"
   "esbuild": ">=0.28.1"
+  "undici@>=8.0.0 <8.5.0": ">=8.5.0"