📄 tiny_http 0.12.0 HTTP Request Smuggling

tinyhttp versions 0.12.0 and earlier contain an HTTP request smuggling vulnerability caused by improper handling of the Transfer-Encoding header. The library checks only for the presence of the header rather than validating its value, allowing inconsistent HTTP request parsing between front-end...