MapCache 1.14.0 is now released, that includes handling a string formatting injection vulnerability. Changelog: https://mapserver.org/development/changelog/mapcache/changelog-1-14.html Download: https://download.osgeo.org/mapserver/mapcache-1.14.0.tar.gz thanks, -- MapServer / MapCache team