CVE-2025-55702

Apache Traffic Server versions 8.0.0 through 8.1.11 , 9.0.0 through 9.2.15 , 10.0.0 through 10.1.4 , and 10.2.0 are vulnerable to a request smuggling flaw. The root cause occurs when a client sends a POST request with Expect: 100-continue and the origin responds before the body is read; the serve...