GHSA-Q3G2-M552-3R9C swift-nio-http2: Missing CR/LF/NUL validation in header values

Summary SwiftNIO HTTP/2 was missing validation on inbound HEADERS frames that let CR, LF, NUL, SP and other control characters reach an HTTP/1.1 backend through NIOHTTP2's HTTP/2-to-HTTP/1 codec, enabling HTTP request smuggling or response splitting. Impact Two related gaps in inbound header...

PT-2025-53845

Name of the Vulnerable Software and Affected Versions Dromara Sa-Token versions prior to 1.45.0 Description A flaw exists in Dromara Sa-Token up to version 1.44.0 related to deserialization. The issue is located in the ObjectInputStream.readObject function within the...