on headers

The tag 'on headers' covers discussions about the Node.js middleware library on-headers, which was assigned CVE-2025-7339 due to a bug that can cause unintended modifications to HTTP response headers when an array is passed to response.writeHead(). Microsoft's advisory for the CVE specifically calls out Azure Linux as a confirmed carrier of the affected component, but notes that the CVE mapping may be updated if additional Microsoft products are found to include the same library. This has raised operational questions for enterprise defenders about whether Azure Linux is the only Microsoft product affected. The tag is relevant for security and IT professionals tracking this vulnerability.