| Package | Affected versions | Patched versions |
|---|---|---|
| org.webjars.npm:http-cache-semantics | < 4.1.1 | 4.1.1 |
| http-cache-semantics | < 4.1.1 | 4.1.1 |
| http-cache-semantics | < 4.1.1 | 4.1.1 |
http-cache semantics contains an Inefficient Regular Expression Complexity , leading to Denial of Service. This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited via malicious request header values sent to a server, when that server reads the cache policy from the request using this library.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free