{"vulnerability": "CVE-2026-13697", "sightings": [{"uuid": "882065c8-dd1e-4128-98b3-17f68e5e273a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13697", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mrsefkx66k2c", "content": "\ud83d\udea8 High-severity security fix in undici@7.29.0 and undici@8.9.0 just released!\n\nPatches CVE-2026-13697: cross-user information disclosure and parse-time crash via degenerate private cache directives\n\ngithub.com/nodejs/undic...", "creation_timestamp": "2026-07-29T16:38:52.617519Z"}, {"uuid": "99592fc7-ad23-4417-b225-f0352a52a013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13697", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrsomyann62v", "content": "undici 7.0.0\uff5e7.28.0, 8.0.0\uff5e8.8.0\u3067\u3001\u4e0d\u6b63\u306aCache-Control\u30d8\u30c3\u30c0\u306b\u3088\u308a\u3001\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u60c5\u5831\uff08Set-Cookie\u7b49\uff09\u304c\u6f0f\u6d29\u3001\u307e\u305f\u306f\u30d7\u30ed\u30bb\u30b9\u304c\u7570\u5e38\u7d42\u4e86\u3059\u308b\u53ef\u80fd\u6027\u2026\nCVE-2026-13697 CVSS 7.4 | HIGH", "creation_timestamp": "2026-07-29T19:41:57.171805Z"}]}