Response header contains a software version pattern
ShipReady found a version pattern in a Server or X-Powered-By response header.
Why it matters
This is bounded technical evidence and should be reviewed in the context of the deployment.
How ShipReady detects it
What it inspects
ShipReady reads Server and X-Powered-By values from the fetched content response.
What triggers a finding
A non-empty supported header value matches its version pattern.
What the evidence shows
The response exposed the observed header version string.
Limits of this check
ShipReady does not verify that the version is accurate, outdated, vulnerable, exploitable, or visible on every route.
How to fix it
Review response-header configuration
Review why the observed Server or X-Powered-By header includes a version string. Where operationally appropriate, configure the application, proxy, or hosting layer to suppress or minimize that value; do not treat this finding as proof that the software is vulnerable.
How to verify the change
Inspect the returned response headers
Fetch the affected content response after deployment and confirm the observed Server or X-Powered-By value no longer exposes the version string you intended to remove.
Expected: The checked response header no longer contains the observed version pattern.