4 matches found
CVE-2026-14643
undici vulnerability CVE-2026-14643 affects the cache interceptor in shared-cache mode. In undici versions 7.0.0–7.28.x and 8.0.0–8.8.x, the Cache-Control directive parser mishandles whitespace around the equals sign, causing the directive to be dropped or stored with literal quotes. This can cau...
CVE-2026-8404
A flaw was found in Django. The django.middleware.cache.UpdateCacheMiddleware component does not correctly process Cache-Control response directives when they use uppercase or mixed-case values. This vulnerability allows a remote attacker to read responses that should not have been cached, leadin...
CVE-2026-8404 Potential exposure of private data via case-sensitive Cache-Control directives in UpdateCacheMiddleware
An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. django.middleware.cache.UpdateCacheMiddleware in Django does not match Cache-Control response directives case-insensitively, which allows remote attackers to read responses that were incorrectly cached because their...
