ROOT-APP-NPM-CVE-2026-9697 CVE-2026-9697 in @rootio/undici - Patched by Root

Root has patched CVE-2026-9697 in the @rootio/undici package for Root:npm. Multiple fixed versions available...

CVE-2026-9697 vulnerabilities

Vulnerabilities for packages: pelias-api, renovate, kibana, langfuse, langfuse-fips, vitess, code-server...

DEBIAN-CVE-2026-9697

Impact: undici's ProxyAgent silently drops the requestTls option when configured with a SOCKS5 proxy URI socks5:// or socks://. The target HTTPS connection through the SOCKS5 tunnel falls back to Node's default trust store, ignoring user-configured ca, cert, key, rejectUnauthorized, and servernam...

CVE-2026-9697

creationtimestamp| type| source ---|---|--- 2026-06-17 16:48:56+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3moirewb2xs2g 2026-06-18 02:31:23+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mojrwgzt3f2d 2026-06-18 15:59:02+00:00| seen|...