CVE-2026-13697

The CVE-2026-13697 issue affects undici’s cache interceptor in shared mode, where a response with a degenerate private Cache-Control directive (e.g., private with an empty value) can be stored in the default shared cache and later served to another caller sharing the same cache key, potentially e...

CVE-2023-2597

In Eclipse Openj9 before version 0.38.0, in the implementation of the shared cache which is enabled by default in OpenJ9 builds the size of a string is not properly checked against the size of the buffer...