NPM: undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches

NPM: undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches vulnerability discovered by ? in WordPress Npm undici versions = 7.0.0, 7.29.1...

NPM: undici vulnerable to caching and replay of unsafe HTTP method responses

NPM: undici vulnerable to caching and replay of unsafe HTTP method responses vulnerability discovered by ? in WordPress Npm undici versions = 7.0.0, 7.29.1...

GHSA-8436-99HF-9MMV undici vulnerable to caching and replay of unsafe HTTP method responses

Impact undici's interceptors.cache documents that it caches only safe HTTP methods. However, its internal skip-list is built by subtracting the configured methods from the safe-methods set, so an unsafe method POST, PUT, PATCH, DELETE never lands in the skip-list and is looked up against the cach...

undici vulnerable to caching and replay of unsafe HTTP method responses

Impact undici's interceptors.cache documents that it caches only safe HTTP methods. However, its internal skip-list is built by subtracting the configured methods from the safe-methods set, so an unsafe method POST, PUT, PATCH, DELETE never lands in the skip-list and is looked up against the cach...

CVE-2026-90915

Joomla! Core - 20260905 - Core - Arbitrary directory deletion via cache purge action in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 -An improper validation of the cache group name allowed path traverals in the file storage of the caching layer, resulting in arbitrary directory deletions...

EUVD-2026-89088

Joomla! Core - 20260905 - Core - Arbitrary directory deletion via cache purge action in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 -An improper validation of the cache group name allowed path traverals in the file storage of the caching layer, resulting in arbitrary directory deletions...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the X.509 extension caching of CRL distribution points, which expands each nameRelativeToCRLIssuer entry into heap structures disproportionate to its encoded size. An attacker can...

CLEANSTART-2026-AH89272 undici's cache interceptor documents that only safe HTTP methods are cached, but its logic to skip caching is built by subtracting the configured methods from the set of safe methods, so an unsafe ...

Security vulnerability affects the langfuse package. undici's cache interceptor documents that only safe HTTP methods are cached, but its logic to skip caching is built by subtracting the configured methods from the set of safe methods, so an unsafe method such as POST, PUT, or DELETE is never...

CVE-2026-97737

In Wakapi before 2.17.6, the user caching service allows a lookup to be resolved in an unintended lookup context, leading to account takeover...

CVE-2026-97737

In Wakapi before 2.17.6, the user caching service allows a lookup to be resolved in an unintended lookup context, leading to account takeover...

EUVD-2026-86516

In Wakapi before 2.17.6, the user caching service allows a lookup to be resolved in an unintended lookup context, leading to account takeover...

CVE-2026-97737

In Wakapi before 2.17.6, the user caching service allows a lookup to be resolved in an unintended lookup context, leading to account takeover...

CVE-2026-97737

In Wakapi before 2.17.6, the user caching service allows a lookup to be resolved in an unintended lookup context, leading to account takeover...

CVE-2026-97737

In Wakapi before 2.17.6, the user caching service allows a lookup to be resolved in an unintended lookup context, leading to account takeover...

CVE-2026-97737

In Wakapi versions prior to 2.17.6 , a vulnerability exists in the user caching service . The flaw allows a lookup to be resolved within an unintended lookup context , which can lead to account takeover . No specific exploit information or in-the-wild exploitation details are provided in the docu...

[SECURITY] Fedora 44 Update: squid-7.7-1.fc44

Squid is a high-performance proxy caching server for Web clients, supporting FTP and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DNS lookups...

[SECURITY] Fedora 45 Update: squid-7.7-1.fc45

Squid is a high-performance proxy caching server for Web clients, supporting FTP and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DNS lookups...

PT-2026-98352

Name of the Vulnerable Software and Affected Versions Wakapi versions prior to 2.17.6 Description The user caching service allows a lookup to be resolved in an unintended lookup context. This flaw occurs when user caching is enabled and can lead to account takeover. Recommendations Update to...

CVE-2026-97737: Access of Resource Using Incompatible Type

In Wakapi before 2.17.6, the user caching service allows a lookup to be resolved in an unintended lookup context, leading to account takeover...

qpid-proton-j: Apache Qpid Proton-J: Denial of Service via unbounded symbol value caching

A flaw was found in Apache Qpid Proton-J. A remote attacker, without needing to authenticate, could exploit an issue with unbounded symbol value caching. This could lead to resource exhaustion, where the system runs out of available resources, ultimately causing a denial of service DoS. A denial ...