AZL-103451
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-103451.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-103451
- Upstream
- CVE-2026-93750
- Published
- 2026-09-18T18:18:33Z
- Modified
- 2026-09-29T05:32:55Z
- Summary
- CVE-2026-93750 affecting package nodejs-nodemon 2.0.3-5
- Details
-
http-cache-semantics through 4.2.0 contains a cache validation vulnerability in the _varyMatches() function that fails to properly validate Vary header wildcards due to byte-for-byte string comparison. Attackers can request URLs previously fetched by other clients to receive cached responses intended for different users, disclosing sensitive information across clients.
- References