4451 matches found
GHSA-Q3G2-M552-3R9C swift-nio-http2: Missing CR/LF/NUL validation in header values
Summary SwiftNIO HTTP/2 was missing validation on inbound HEADERS frames that let CR, LF, NUL, SP and other control characters reach an HTTP/1.1 backend through NIOHTTP2's HTTP/2-to-HTTP/1 codec, enabling HTTP request smuggling or response splitting. Impact Two related gaps in inbound header...
6.3CVSS6AI score0.00181EPSS
SaveExploits0References6
20