kornelski http-cache-semantics

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-93750≤ 4.2.0http-cache-semantics through 4.2.0 Cross-Client Cache Disclosure via Vary WildcardHIGH 8.20.4 %
CVE-2026-93748≤ 4.2.0http-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-staleHIGH 8.70.6 %