This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited via malicious request header values sent to a server, when that server reads the cache policy from the request using this library.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| http-cache-semantics(npm) | 0 | 4.1.1 | N/A |
| org.webjars.npm:http-cache-semantics(Maven) | 0 | 4.1.1 | N/A |
CVSS Metrics
