Skip to content
OpenAdvisories

Package · npm

http-cache-semantics

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.3
    CVE-2022-25881

    http-cache-semantics vulnerable to Regular Expression Denial of Service

    This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited via malicious request header values sent to a server, when that server reads the cache policy from the request using this library.

    http-cache-semantics org.webjars.npm:http-cache-semantics npm Maven