There are multiple vulnerabiltities in undici with version < 6.24.0 See: https://github.com/advisories/GHSA-v9p9-hfj2-hcw8 https://github.com/advisories/GHSA-f269-vfmq-vjvj Can you please update the version in `@actions/http-client` package and release a new version. See https://github.com/actions/toolkit/blob/44d43b5490b02998bd09b0c4ff369a4cc67876c2/packages/http-client/package.json#L68 Thank you for your support