Kornelski Http-cache-semantics vulnerabilities

• kornelski http-cache-semantics http-cache-semantics through 4.2.0 Cross-Client Cache Disclosure via Vary Wildcard CVE-2026-93750 8.2 HighSeptember 18, 2026
• kornelski http-cache-semantics http-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-stale CVE-2026-93748 Fix available 8.7 HighSeptember 18, 2026