Lucene search
+L

68 matches found

Github Security Blog
Github Security Blog
•added 2026/07/24 10:26 p.m.•24 views

blaze: Multiple HTTP/1.1 request-smuggling primitives in blaze's Java wire parser

Summary Five independent HTTP/1.1 conformance laxities in blaze's hand-written Java parser http/src/main/java/org/http4s/blaze/http/parser/ cause request-boundary disagreement with a stricter intermediary. All are reachable from a default BlazeServerBuilder with no non-default configuration. Impa...

7.4CVSS5.9AI score0.00628EPSS
SaveExploits0References10Affected Software3
Rows per page
Query Builder