What’s Vulnerable › Products

kornelski http-cache-semantics vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your kornelski http-cache-semantics version is affected

Latest kornelski http-cache-semantics vulnerabilities

• CVE-2026-93750 — http-cache-semantics through 4.2.0 Cross-Client Cache Disclosure via Vary Wildcard (CVSS 5.9)
• CVE-2026-93748 — http-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-stale (CVSS 7.5)