kornelski http-cache-semantics

2 known vulnerabilities in kornelski http-cache-semantics, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-93750 CVSS 8.2 high http-cache-semantics through 4.2.0 contains a cache validation vulnerability in the _varyMatches() function that fails to properly…
CVE-2026-93748 CVSS 8.7 high http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-stale directives…