kornelski/http-cache-semantics

kornelski/http-cache-semantics

GitHubGitHub
GitHubgithub.com
httpwg.orghttpwg.org
Releases19
Frequency4 months 1 week
Last Release
Stars259
RFC 7234 in JavaScript. Parses HTTP headers to correctly compute cacheability of responses, even in complex cases
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-25881↗
5.3 MEDIUM—

This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited via malicious request header values sent to a server, when that server reads the cache policy from the request using this library.