Skip to content
Sign in
5.3 Medium

CVE-2022-25881 This affects versions of the package http-cache-semantics before 4.1.1

Description

This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited via malicious request header values sent to a server, when that server reads the cache policy from the request using this library.

Affected products and versions

Product Affected versions Fixed in
http-cache-semantics 4.1 earliest → < 4.1.1 4.1.1
org.webjars.npm:http-cache-semantics 4.1 earliest → < 4.1.1 4.1.1
Track this CVE