From d9e4dd44c12681c65c5caea4b271b5937184f531 Mon Sep 17 00:00:00 2001
From: "pubnub-snyk-universal-prd[bot]"
 <333719428+pubnub-snyk-universal-prd[bot]@users.noreply.github.com>
Date: Wed, 11 Nov 2026 12:10:09 +0000
Subject: [PATCH 1/2] fix: package.json & package-lock.json to reduce
 vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-UNDICI-22392401
---
 package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package.json b/package.json
index ac462d04d..61f45ccd6 100644
--- a/package.json
+++ b/package.json
@@ -73,7 +73,7 @@
     "fast-text-encoding": "^1.0.6",
     "fflate": "^0.8.3",
     "lil-uuid": "^0.1.1",
-    "undici": "^7.30.1"
+    "undici": "^7.30.2"
   },
   "peerDependencies": {
     "react-native-url-polyfill": "^2.0.0"

From 3e1db703560ec7b45325f33a3a22097d1b776450 Mon Sep 17 00:00:00 2001
From: "pubnub-snyk-universal-prd[bot]"
 <333719428+pubnub-snyk-universal-prd[bot]@users.noreply.github.com>
Date: Wed, 11 Nov 2026 12:10:11 +0000
Subject: [PATCH 2/2] fix: package.json & package-lock.json to reduce
 vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-UNDICI-22392401
---
 package-lock.json | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index f393329b7..66f4547ec 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "pubnub",
-  "version": "13.1.2",
+  "version": "13.1.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "pubnub",
-      "version": "13.1.2",
+      "version": "13.1.3",
       "license": "SEE LICENSE IN LICENSE",
       "dependencies": {
         "agentkeepalive": "^3.5.2",
@@ -16,7 +16,7 @@
         "fast-text-encoding": "^1.0.6",
         "fflate": "^0.8.3",
         "lil-uuid": "^0.1.1",
-        "undici": "^7.30.1"
+        "undici": "^7.30.2"
       },
       "devDependencies": {
         "@rollup/plugin-commonjs": "^25.0.7",
@@ -14530,9 +14530,9 @@
       "license": "MIT"
     },
     "node_modules/undici": {
-      "version": "7.30.1",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-7.30.1.tgz",
-      "integrity": "sha512-03KrMbjIFDWQR5RNPrSw3bd1r12JpyFQl9/yxjUbJtqkjmllqC5lFjZh6ujeuJCKr8EOQvRW872Oy/az+nLYxg==",
+      "version": "7.30.2",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-7.30.2.tgz",
+      "integrity": "sha512-mLyPQnHwUxaM/rideoK/+KL8DaAJLRl4aBCfmX444aCSLnIaomqPLtNRe2jdCYcsk5wZzXrDIQC8ZeYNRAYyIA==",
       "license": "MIT",
       "engines": {
         "node": ">=20.18.1"