diff --git a/.changeset/wet-bugs-burn.md b/.changeset/wet-bugs-burn.md
new file mode 100644
index 0000000000..d7372e046d
--- /dev/null
+++ b/.changeset/wet-bugs-burn.md
@@ -0,0 +1,5 @@
+---
+"create-cloudflare": patch
+---
+
+chore: bump undici to 5.28.4
diff --git a/packages/cli/package.json b/packages/cli/package.json
index b5db1ef9af..f80d925019 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -32,6 +32,6 @@
 		"esbuild": "^0.17.12",
 		"log-update": "^5.0.1",
 		"pnpm": "^8.6.11",
-		"undici": "5.28.3"
+		"undici": "5.28.4"
 	}
 }
diff --git a/packages/create-cloudflare/package.json b/packages/create-cloudflare/package.json
index cf80c1c2e0..f75af8b840 100644
--- a/packages/create-cloudflare/package.json
+++ b/packages/create-cloudflare/package.json
@@ -79,7 +79,7 @@
 		"pnpm": "^8.10.0",
 		"recast": "^0.22.0",
 		"semver": "^7.5.1",
-		"undici": "5.28.3",
+		"undici": "5.28.4",
 		"vite-tsconfig-paths": "^4.0.8",
 		"which-pm-runs": "^1.1.0",
 		"wrangler": "workspace:*",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 0a66f951a5..18dff625ce 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -765,8 +765,8 @@ importers:
         specifier: ^8.6.11
         version: 8.6.11
       undici:
-        specifier: 5.28.3
-        version: 5.28.3
+        specifier: 5.28.4
+        version: 5.28.4
 
   packages/create-cloudflare:
     devDependencies:
@@ -882,8 +882,8 @@ importers:
         specifier: ^7.5.1
         version: 7.5.1
       undici:
-        specifier: 5.28.3
-        version: 5.28.3
+        specifier: 5.28.4
+        version: 5.28.4
       vite-tsconfig-paths:
         specifier: ^4.0.8
         version: 4.2.0(typescript@5.4.5)(vite@5.0.12(@types/node@18.16.10))
@@ -3865,6 +3865,10 @@ packages:
     resolution: {integrity: sha512-+KpH+QxZU7O4675t3mnkQKcZZg56u+K/Ct2K+N2AZYNVK8kyeo/bI18tI8aPm3tvNNRyTWfj6s5tnGNlcbQRsA==}
     engines: {node: '>=14'}
 
+  '@fastify/busboy@2.1.1':
+    resolution: {integrity: sha512-vBZP4NlzfOlerQTnba4aqZoMhE/a9HY7HRqoOPaETQcSQuWEIyZMHGfVu6w9wGtGK5fED5qRs2DteVCjOH60sA==}
+    engines: {node: '>=14'}
+
   '@gar/promisify@1.1.3':
     resolution: {integrity: sha512-k2Ty1JcVojjJFwrg/ThKi2ujJ7XNLYaFGNB/bWT9wGR+oSMJHMa5w+CUq6p/pVrKeNNgA7pCqEcjSnHVoqJQFw==}
 
@@ -9243,6 +9247,10 @@ packages:
     resolution: {integrity: sha512-JjCoypp+jKn1ttEFExxhetCKeJt9zhAgAve5FXHixTvFDW/5aEktX9bufBKLRRMdU7bNtpLfcGu94B3cdEJgjg==}
     engines: {node: '>= 0.8.0'}
 
+  optionator@0.9.4:
+    resolution: {integrity: sha512-6IpQ7mKUxRcZNLIObR0hz7lxsapSSIYNZJwXPGeF0mTVqGKFIXj1DQcMoT22S3ROcLyY/rz0PWaWZ9ayWmad9g==}
+    engines: {node: '>= 0.8.0'}
+
   ora@4.1.1:
     resolution: {integrity: sha512-sjYP8QyVWBpBZWD6Vr1M/KwknSw6kJOz41tvGMlwWeClHBtYKTbHMki1PsLZnxKpXMPbTKv9b3pjQu3REib96A==}
     engines: {node: '>=8'}
@@ -11540,6 +11548,10 @@ packages:
     resolution: {integrity: sha512-Hz/mrNwitNRh/HUAtM/VT/5VH+ygD6DV7mYKZAtHOrbs8U7lvPS6xf7EJKMF0uW1KJCl0H701g3ZGus+muE5vQ==}
     engines: {node: '>=0.10.0'}
 
+  word-wrap@1.2.5:
+    resolution: {integrity: sha512-BN22B5eaMMI9UMtjrGd5g5eCYPpCPDUy0FJXbYsaT5zYxjFOckS53SQDE3pWkVoWpHXVb3BrYcEN4Twa55B5cA==}
+    engines: {node: '>=0.10.0'}
+
   wordwrap@1.0.0:
     resolution: {integrity: sha512-gvVzJFlPycKc5dZN4yPkP8w7Dc37BtP1yczEneOb4uq34pXZcvrtRTmWV8W+Ume+XCxKgbjM+nevkyFPMybd4Q==}
 
@@ -14016,6 +14028,8 @@ snapshots:
 
   '@fastify/busboy@2.1.0': {}
 
+  '@fastify/busboy@2.1.1': {}
+
   '@gar/promisify@1.1.3': {}
 
   '@hono/zod-validator@0.1.8(hono@3.5.6)(zod@3.22.3)':
@@ -18469,7 +18483,7 @@ snapshots:
       lodash.merge: 4.6.2
       minimatch: 3.1.2
       natural-compare: 1.4.0
-      optionator: 0.9.3
+      optionator: 0.9.4
       strip-ansi: 6.0.1
       text-table: 0.2.0
     transitivePeerDependencies:
@@ -21404,6 +21418,15 @@ snapshots:
       prelude-ls: 1.2.1
       type-check: 0.4.0
 
+  optionator@0.9.4:
+    dependencies:
+      deep-is: 0.1.4
+      fast-levenshtein: 2.0.6
+      levn: 0.4.1
+      prelude-ls: 1.2.1
+      type-check: 0.4.0
+      word-wrap: 1.2.5
+
   ora@4.1.1:
     dependencies:
       chalk: 3.0.0
@@ -23437,7 +23460,7 @@ snapshots:
 
   undici@5.28.2:
     dependencies:
-      '@fastify/busboy': 2.1.0
+      '@fastify/busboy': 2.1.1
 
   undici@5.28.3:
     dependencies:
@@ -23445,7 +23468,7 @@ snapshots:
 
   undici@5.28.4:
     dependencies:
-      '@fastify/busboy': 2.1.0
+      '@fastify/busboy': 2.1.1
 
   unicode-canonical-property-names-ecmascript@2.0.0: {}
 
@@ -23982,6 +24005,8 @@ snapshots:
 
   word-wrap@1.2.3: {}
 
+  word-wrap@1.2.5: {}
+
   wordwrap@1.0.0: {}
 
   workerd@1.20240419.0: