CVE-2026-116592 undici vulnerable to cache poisoning and cross-user disclosure via intermediate redirect hops

undici is an HTTP client for Node.js. In versions 7.30.1 and 8.12.2 through 8.12.3, when an originless Agent composes the redirect and shared cache interceptors, undici decides whether to store the final response under the original request key by inspecting only the final redirect hop, which...

UBUNTU-CVE-2026-116592

undici is an HTTP client for Node.js. In versions 7.30.1 and 8.12.2 through 8.12.3, when an originless Agent composes the redirect and shared cache interceptors, undici decides whether to store the final response under the original request key by inspecting only the final redirect hop, which...

PT-2026-137912

Name of the Vulnerable Software and Affected Versions undici version 7.30.1 undici versions 8.12.2 through 8.12.3 Description When an originless Agent composes redirect and shared cache interceptors, the system determines whether to store the final response under the original request key by...