Http-cache-semantics vulnerabilities
We track 1 vulnerability in Http-cache-semantics products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 31, 2023.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Http-cache-semantics vulnerabilities
- 7.5 High severity
http-cache-semantics: Inefficient Regular Expression Complexity
This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited via malicious request header values sent to a server, when that server reads the cache policy from the request using this library.