Lucene search
+L

4451 matches found

OSV
OSV
added 6 days ago3 views

GHSA-Q3G2-M552-3R9C swift-nio-http2: Missing CR/LF/NUL validation in header values

Summary SwiftNIO HTTP/2 was missing validation on inbound HEADERS frames that let CR, LF, NUL, SP and other control characters reach an HTTP/1.1 backend through NIOHTTP2's HTTP/2-to-HTTP/1 codec, enabling HTTP request smuggling or response splitting. Impact Two related gaps in inbound header...

6.3CVSS6AI score0.00181EPSS
SaveExploits0References6
Rows per page
Query Builder