Threats tagged 'ghsa-f27v-pv5m-c5g6'

CVE-2026-93750 is a cache validation vulnerability in the http-cache-semantics library up to version 4.2.0. The flaw exists in the _varyMatches() function, which improperly validates Vary header wildcards by using byte-for-byte string comparison. This can allow attackers to receive cached responses intended for other users by requesting URLs previously fetched by different clients, potentially exposing sensitive information across clients.