undici: Undici: Information disclosure due to improper cache-control header parsing

LLM-synthesized narrative grounded in this CVE's description and references.

• Npm/Undiciinferred

  Package: https://npmjs.com/package/undici
• Undici/Undicillm-fuzzy

No source-code context for this CVE — mechanics is only generated when we can read the actual fix diff. Without that, the four sections (root cause, attack vector, affected code, fix) would be speculation rather than analysis.

• github.com/advisories/GHSA-pr7r-676h-xcf6ghsaADVISORY
• cna.openjsf.org/security-advisories.htmlghsa
• github.com/nodejs/undici/security/advisories/GHSA-pr7r-676h-xcf6ghsa
• nvd.nist.gov/vuln/detail/CVE-2026-9678ghsa

No linked articles in our index yet.