nodejs

A request header made Next.js cache private per-user responses

One internal header flips an SSR response into an SSG one, and the Cache-Control header follows it.

found by Allam Rachid (zhero_) and Henry Chen

Arbitrary file write in node-tar through a stale directory cache

node-tar skipped a symlink check whenever its directory cache said the path was fine, and two ways of spelling a path could make the cache lie.

found by chen-robert, ginkoid and levpachmanov