HTTP Response Splitting

Pitchfork is vulnerable to HTTP Response Splitting.The vulnerability is due to improper input sanitization allowing unvalidated user input being passed to HTTP headers when used with Rack 3...

Shopify Pitchfork 注入漏洞

Shopify Pitchfork is a preforked HTTP server for a Rack application from Shopify Canada. An injection vulnerability exists in Shopify Pitchfork versions prior to 0.11.0 that stems from HTTP response header injection when used in conjunction with Rack 3...