CVE-2026-63382

creationtimestamp| type| source ---|---|--- 2026-08-20 19:40:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjyrwrc6p2e 2026-08-20 20:07:47+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtk2dhft6o2f...

CVE-2026-63382 libevent evhttp: Multiple HTTP Parser Bugs Enable Request Smuggling

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, the libevent evhttp parser in http.c inconsistently handles duplicate Transfer-Encoding headers, comma-separated Transfer-Encoding values, and bare line feeds in chunked framing. evhttpfindheader can select only the first...