CVE-2026-13697 vulnerabilities

Vulnerabilities for packages: kibana, langfuse, commercial-gitlab-rails-ee-fips, code-server, commercial-gitlab-rails-ee, vitess, renovate, langfuse-fips, pelias-api...

CVE-2026-13697

undici's cache interceptor mishandles malformed Cache-Control private directives. In undici 7.0.0 up to before 7.29.0 and 8.0.0 up to before 8.9.0, a response carrying a degenerate qualified private directive, such as private set to an empty value, can be stored in the default shared cache and...