Important: nodejs24

Issue Overview: brace-expansion through 5.0.6 is vulnerable to denial of service. The expand function exhibits exponential-time complexity in the number of consecutive non-expanding '' brace groups. An attacker who passes a crafted string to expand, directly or transitively, can cause significant...

Node.js Module Undici 7.x < 7.29.0 / 8.x < 8.9.0 Information Disclosure

The nodejs module Undici detected on the host is version 7.x prior to 7.29.0 or 8.x prior to 8.9.0. It is, therefore, affected by a vulnerability: - undici's cache interceptor mishandles malformed Cache-Control private directives. In undici 7.0.0 up to before 7.29.0 and 8.0.0 up to before 8.9.0, ...

CVE-2026-13697 vulnerabilities

Vulnerabilities for packages: renovate, code-server, vitess, langfuse...

CVE-2026-13697 vulnerabilities

Vulnerabilities for packages: code-server, pelias-api, langfuse, kibana, vitess, langfuse-fips, renovate...

CVE-2026-13697

undici's cache interceptor mishandles malformed Cache-Control private directives. In undici 7.0.0 up to before 7.29.0 and 8.0.0 up to before 8.9.0, a response carrying a degenerate qualified private directive, such as private set to an empty value, can be stored in the default shared cache and...

CVE-2026-13697

creationtimestamp| type| source ---|---|--- 2026-07-29 16:38:52+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mrsefkx66k2c 2026-07-29 19:41:57+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrsomyann62v 2026-08-03 19:23:59+00:00| seen|...

CVE-2026-13697

undici's cache interceptor mishandles malformed Cache-Control private directives. In undici 7.0.0 up to before 7.29.0 and 8.0.0 up to before 8.9.0, a response carrying a degenerate qualified private directive, such as private set to an empty value, can be stored in the default shared cache and...