Package · Maven

org.webjars.npm:http-cache-semantics

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium 5.3

CVE-2022-25881

http-cache-semantics vulnerable to Regular Expression Denial of Service

This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited via malicious request header values sent to a server, when that server reads the cache policy from the request using this library.

nodejs nodejs-nodemon http-cache-semantics org.webjars.npm:http-cache-semantics Azure Linux npm Maven

Jan 31, 2023