Node.js Module Undici 7.x < 7.29.0 / 8.x < 8.9.0 Information Disclosure

The nodejs module Undici detected on the host is version 7.x prior to 7.29.0 or 8.x prior to 8.9.0. It is, therefore, affected by a vulnerability: - undici's cache interceptor mishandles malformed Cache-Control private directives. In undici 7.0.0 up to before 7.29.0 and 8.0.0 up to before 8.9.0, ...

CVE-2026-13697 vulnerabilities

Vulnerabilities for packages: vitess, code-server, renovate, langfuse...

CVE-2026-13697

undici's cache interceptor mishandles malformed Cache-Control private directives. In undici 7.0.0 up to before 7.29.0 and 8.0.0 up to before 8.9.0, a response carrying a degenerate qualified private directive, such as private set to an empty value, can be stored in the default shared cache and...