ROOT-APP-NPM-CVE-2026-9697 CVE-2026-9697 in undici - Patched by Root

Root has patched CVE-2026-9697 in the undici package for Root:npm. Multiple fixed versions available...

CVE-2026-9697 vulnerabilities

Vulnerabilities for packages: langfuse-fips, py3-captum, langfuse, commercial-gitlab-rails-ee-fips, kibana, renovate, commercial-gitlab-rails-ee, pelias-api, code-server, vitess...

DEBIAN-CVE-2026-9697

Impact: undici's ProxyAgent silently drops the requestTls option when configured with a SOCKS5 proxy URI socks5:// or socks://. The target HTTPS connection through the SOCKS5 tunnel falls back to Node's default trust store, ignoring user-configured ca, cert, key, rejectUnauthorized, and servernam...

CVE-2026-9697

creationtimestamp| type| source ---|---|--- 2026-06-17 16:48:56+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3moirewb2xs2g 2026-06-18 02:31:23+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mojrwgzt3f2d 2026-06-18 15:59:02+00:00| seen|...