{"action":"Upgrade org.webjars.npm:http-cache-semantics to 4.1.1 or later.","affected":[{"fixed":"4.1.1","introduced":"0"}],"component":"org.webjars.npm:http-cache-semantics","cve_ids":["CVE-2022-25881"],"ecosystem":"Maven","epss":0.01613,"exploited":false,"fixed_versions":["4.1.1"],"ghsa_id":"GHSA-rc47-6667-2j5j","id":"tcs_01M5N9BFTDW58RTA09HBKPV24C","modified_at":"2026-09-10T03:49:51.817106987Z","published_at":"2023-01-31T06:30:26Z","references":["https://osv.dev/vulnerability/GHSA-rc47-6667-2j5j","https://nvd.nist.gov/vuln/detail/CVE-2022-25881","https://github.com/kornelski/http-cache-semantics/commit/560b2d8ef452bbba20ffed69dc155d63ac757b74","https://github.com/kornelski/http-cache-semantics","https://github.com/kornelski/http-cache-semantics/blob/master/index.js%23L83","https://security.netapp.com/advisory/ntap-20230622-0008","https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-3253332","https://security.snyk.io/vuln/SNYK-JS-HTTPCACHESEMANTICS-3248783"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-rc47-6667-2j5j#Maven/org.webjars.npm:http-cache-semantics","url":"https://osv.dev/vulnerability/GHSA-rc47-6667-2j5j"}],"summary":"http-cache-semantics vulnerable to Regular Expression Denial of Service"}