This blog post provides an introduction to web cache poisoning and demonstrates why open source maintainers should take this issue into account.