CVE-2026-14643
undici cache interceptor mishandles optional whitespace around the equals sign of qualified no-cache or private Cache-Control directives.
@yogsec.bsky.social
@yogsec.bsky.socialCVE-2026-14643
undici cache interceptor mishandles optional whitespace around the equals sign of qualified no-cache or private Cache-Control directives.
@securityonline.bsky.socialTwo Discourse vulnerabilities, CVE-2026-55674 and CVE-2026-55420, enable cache poisoning XSS and server file reads. Patch to the fixed releases now.
#Discourse #CVE202655674 #CVE202655420 #CachePoisoning #XSS #ImageMagick #VulnerabilityReport #CyberSecurity