Product

org.webjars.npm/http-cache-semantics vulnerabilities

1 published CVE affecting org.webjars.npm/http-cache-semantics, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 1
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest org.webjars.npm/http-cache-semantics CVEs

Newest publication first

CVE-2022-25881 http-cache-semantics vulnerable to Regular Expression Denial of Service
Published 2023-01-31

HighCVSS 7.5 EPSS 1.7%

This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited via malicious request header values sent to a server, when that server reads the cache policy from the request using this library.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

org.webjars.npm/http-cache-semantics vulnerabilities

Latest org.webjars.npm/http-cache-semantics CVEs

CVE-2022-25881 http-cache-semantics vulnerable to Regular Expression Denial of Service