376 matches found
CVE-2025-61598 Discourse is missing Cache-Control response header on error responses
Discourse is an open source discussion platform. Version before 3.6.2 and 3.6.0.beta2, default Cache-Control response header with value no-store, no-cache was missing from error responses. This may caused unintended caching of those responses by proxies potentially leading to cache poisoning...
PT-2025-44213
Name of the Vulnerable Software and Affected Versions Discourse versions prior to 3.6.2 Discourse version 3.6.0.beta2 Description Discourse, an open source discussion platform, is affected by an issue where the default Cache-Control response header with the value no-store, no-cache was missing fr...
Discourse 安全漏洞
Discourse is an open source community discussion platform from Discourse Open Source. The platform includes features such as communities, email and chat rooms. A security vulnerability exists in Discourse versions prior to 3.6.2 and 3.6.0.beta2, which stems from the lack of a default Cache-Contro...
Prompt Caching Support in Spring AI with Anthropic Claude
Large language model API costs can accumulate quickly when applications repeatedly send the same prompt content. A typical scenario: you're building a document analyzer that includes a 3,000-token document in every request. Five questions about that document means processing 15,000 tokens of...
📄 Packet Storm Missing Cache Header
Packet Storm was missing a cache control header on the user settings page, allowing for parties to click back in a browser post-logout and see the page from the local browser cache. As shared computing situations can allow this to lead to an information disclosure issue, it was immediately...
EUVD-2013-4430
Malware in sbrugna...
EUVD-2008-2140
Malware in sbrugna...
EUVD-2015-7292
Malware in sbrugna...
EUVD-2013-4381
Malware in sbrugna...
EUVD-2014-0976
Malware in sbrugna...
EUVD-2009-0362
Malware in sbrugna...
EUVD-1999-1156
Malware in sbrugna...
EUVD-2025-14946
Malicious code in bioql PyPI...
EUVD-2024-0012
Malicious code in bioql PyPI...
EUVD-2025-9279
Malicious code in bioql PyPI...
EUVD-2023-2714
Malicious code in bioql PyPI...
EUVD-2025-9248
Malicious code in bioql PyPI...
EUVD-2022-5838
Malicious code in bioql PyPI...
CVE-2025-48947
The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. In Auth0 Next.js SDK versions 4.0.1 through 4.6.0, session cookies set by auth0.middleware may be cached by CDNs due to missing Cache-Control headers. Three preconditions must be met in order for...
Sensitive Information Disclosure
@auth0/nextjs-auth0 is vulnerable to Sensitive Information Disclosure. The vulnerability is due to missing cache control headers due to session cookies being cached by CDNs, potentially exposing sensitive session information to unauthorized users...