CVE-2022-25881, GHSA-rc47-6667-2j5j
npm/http-cache-semantics
http-cache-semantics vulnerable to Regular Expression Denial of Service
This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited via malicious request header values sent to a server, when that server reads the cache policy from the request using this library.
All versions before 4.1.1
Upgrade to version 4.1.1 or above.
2023-02-02
source |