Lucene search
+L

6 matches found

osv_root
osv_root
•added 2026/09/09 11:42 a.m.•19 views

ROOT-APP-NPM-GHSA-8X6C-CV3V-VP6G GHSA-8x6c-cv3v-vp6g in cacheable-request - Patched by Root

Root has patched GHSA-8x6c-cv3v-vp6g in the cacheable-request package for Root:npm. Multiple fixed versions available...

5.4AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/08/17 12:00 a.m.•7 views

PT-2026-82645

Root has patched GHSA-8x6c-cv3v-vp6g in the cacheable-request package for Root:npm. Multiple fixed versions available...

5.7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2026/08/04 10:40 a.m.•2 views

Malware in cacheable-request

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2023/02/11 12:13 a.m.•450 views

Withdrawn: cacheable-request depends on http-cache-semantics, which is vulnerable to Regular Expression Denial of Service

This advisory is withdawn. cacheable-request depends on http-cache-semanttics, which contains an Inefficient Regular Expression Complexity in versions prior to 4.1.1 of that package. cacheable-request has been updated to rely on the fixed version in 10.2.7. Summary of http-cache-semantics...

3.4AI score
SaveExploits0References4Affected Software1
osv_ghsa
osv_ghsa
•added 2023/02/11 12:13 a.m.•26 views

GHSA-8X6C-CV3V-VP6G Withdrawn: cacheable-request depends on http-cache-semantics, which is vulnerable to Regular Expression Denial of Service

This advisory is withdawn. cacheable-request depends on http-cache-semanttics, which contains an Inefficient Regular Expression Complexity in versions prior to 4.1.1 of that package. cacheable-request has been updated to rely on the fixed version in 10.2.7. Summary of http-cache-semantics...

7.5CVSS6.9AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/02/11 12:00 a.m.•15 views

PT-2023-33000 · Unknown · Http-Cache-Semantics +1

Name of the Vulnerable Software and Affected Versions: http-cache-semantics versions prior to 4.1.1 cacheable-request versions prior to 10.2.7 Description: The issue is related to an Inefficient Regular Expression Complexity in http-cache-semantics, which can lead to Denial of Service. This can b...

7.5CVSS7AI score
SaveExploits0References5
Rows per page
Query Builder