kornelski CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH kornelski CVE published 2026-09-18

CVE-2026-93748

CVE-2026-93748 is a high-severity vulnerability in the http-cache-semantics package, which allows unauthenticated attackers to retrieve cached responses belonging to other users. The vulnerability is caused by the package's failure to properly validate security-zeroed cache entries when processing client max-stale directives. Affected product deployments should be identified in managed environments, and o [truncated]