Http-Cache-Semantics Project Http-Cache-Semantics vulnerabilities

1 known vulnerability affecting http-cache-semantics_project/http-cache-semantics.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2022-25881HIGHCVSS 7.5fixed in 4.1.12023-01-31

CVE-2022-25881 [HIGH] CWE-1333 CVE-2022-25881: This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited v This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited via malicious request header values sent to a server, when that server reads the cache policy from the request using this library.