Lucene search

K
osvGoogleOSV:GHSA-C8RQ-CRXJ-MJ9M
HistoryMay 24, 2022 - 5:40 p.m.

Async-h1 request smuggling possible with long unread bodies

2022-05-2417:40:15
Google
osv.dev
6

0.001 Low

EPSS

Percentile

34.0%

An issue was discovered in the async-h1 crate before 2.3.0 for Rust. Request smuggling can occur when used behind a reverse proxy.

CPENameOperatorVersion
async-h1lt2.3.0

0.001 Low

EPSS

Percentile

34.0%

Related for OSV:GHSA-C8RQ-CRXJ-MJ9M