References https://security.snyk.io/vuln/SNYK-JS-HTTPCACHESEMANTICS-3248783 https://github.com/advisories/GHSA-rc47-6667-2j5j https://nvd.nist.gov/vuln/detail/cve-2022-25881 https://access.redhat.com/security/cve/cve-2022-25881 https://www.acunetix.com/vulnerabilities/sca/cve-2022-25881-vulnerability-in-npm-package-http-cache-semantics/ https://tsn.miraclelinux.com/en/node/16446 https://www.ibm.com/support/pages/security-bulletin-nodejs-http-cache-semantics-module-vulnerable-cve-2022-25881-used-ibm-maximo-application-suite-monitor-component https://www.tenable.com/cve/CVE-2022-25881 https://avd.aquasec.com/nvd/2022/cve-2022-25881/ https://www.cve.org/CVERecord?id=CVE-2022-25881
Related VulnerabilitiesPoCCVE-2026-86206: N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header SpoofingPoCjohnson-controls-default-login: Johnson Controls Frick Quantum HD Compressors - Default Login畅捷通T+系统 AccountExtendRuleController接口处存在反序列化漏洞PoCCVE-2026-5032: W3 Total Cache <= 2.9.3 - Unauthenticated Dynamic Security Token Disclosure金和OA /c6/JHSoft.Web.CostControl/Decompose/AjaxForCenterBudgetDecompose.ashx SQL 注入漏洞金和OA /c6/JHSoft.Web.CostControl/BudgetExecution/VouchUpdate.aspx SQL 注入漏洞PoCCVE-2026-46442: Flowise < 3.1.2 - node-custom-function Unauthorized RCEPoCCVE-2026-9282: W3 Total Cache <= 2.9.4 - Unauthenticated Arbitrary File ReadWordPress W3 Total Cache /?w3tc_minify 文件读取漏洞(CVE-2026-9282)FlowiseAI Flowise /api/v1/node-custom-function 代码执行漏洞(CVE-2026-46442)天问物业ERP系统 /HM/M_Main/HC/DataGetControl.aspx SQL 注入漏洞技嘉科技|Gigabyte Control Center - Improper Access ControlPoCopcache-control-panel: Opcache control Panel - Unauthenticated Access