Lucene search
+L

4971 matches found

RedhatCVE
RedhatCVE
added 2025/10/13 5:29 a.m.8 views

CVE-2025-61689

HTTP.jl is an HTTP client and server functionality for the Julia programming language. Prior to version 1.10.19, HTTP.jl did not validate header names/values for illegal characters, allowing CRLF-based header injection and response splitting. This enables HTTP response splitting and header...

9.2CVSS7.2AI score0.00318EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/10 5:15 p.m.13 views

CVE-2025-61689

HTTP.jl is an HTTP client and server functionality for the Julia programming language. Prior to version 1.10.19, HTTP.jl did not validate header names/values for illegal characters, allowing CRLF-based header injection and response splitting. This enables HTTP response splitting and header...

9.2CVSS0.00318EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/10 4:48 p.m.9 views

EUVD-2025-33756

HTTP.jl is an HTTP client and server functionality for the Julia programming language. Prior to version 1.10.19, HTTP.jl did not validate header names/values for illegal characters, allowing CRLF-based header injection and response splitting. This enables HTTP response splitting and header...

9.2CVSS6.6AI score0.00318EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/10 4:48 p.m.9 views

CVE-2025-61689 HTTP.jl vulnerable to Header injection/Response splitting via header construction.

HTTP.jl is an HTTP client and server functionality for the Julia programming language. Prior to version 1.10.19, HTTP.jl did not validate header names/values for illegal characters, allowing CRLF-based header injection and response splitting. This enables HTTP response splitting and header...

9.2CVSS7.2AI score
SaveExploits0References4
Cvelist
Cvelist
added 2025/10/10 4:48 p.m.17 views

CVE-2025-61689 HTTP.jl vulnerable to Header injection/Response splitting via header construction.

HTTP.jl is an HTTP client and server functionality for the Julia programming language. Prior to version 1.10.19, HTTP.jl did not validate header names/values for illegal characters, allowing CRLF-based header injection and response splitting. This enables HTTP response splitting and header...

9.2CVSS0.00318EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/10 4:48 p.m.3 views

CVE-2025-61689 HTTP.jl vulnerable to Header injection/Response splitting via header construction.

HTTP.jl is an HTTP client and server functionality for the Julia programming language. Prior to version 1.10.19, HTTP.jl did not validate header names/values for illegal characters, allowing CRLF-based header injection and response splitting. This enables HTTP response splitting and header...

9.2CVSS6.8AI score0.00318EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/10 4:48 p.m.15 views

CVE-2025-61689

CVE-2025-61689 affects the Julia HTTP client/server library HTTP.jl. Prior to version 1.10.19, it failed to validate illegal characters in header names/values, enabling CRLF-based header injection and response splitting. Reported impact includes cache poisoning, XSS, and session fixation. The iss...

9.2CVSS6.8AI score0.00318EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/10 12:00 a.m.16 views

Julia HTTP.jl 注入漏洞

Julia HTTP.jl is a Julia open source HTTP protocol for Julia. An injection vulnerability exists in Julia HTTP.jl versions prior to 1.10.19, which stems from illegal characters in unvalidated header names and values, and could lead to HTTP response splitting and header injection attacks...

9.2CVSS6.9AI score0.00318EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/10 12:00 a.m.10 views

PT-2025-41579

Name of the Vulnerable Software and Affected Versions HTTP.jl versions prior to 1.10.19 Description HTTP.jl, an HTTP client and server for the Julia programming language, did not properly validate header names and values, creating a risk of header injection and response splitting. This could lead...

9.2CVSS6.2AI score0.00318EPSS
SaveExploits0References8
OSV
OSV
added 2025/10/08 5:41 p.m.10 views

JLSEC-2025-1 CR/LF injection in URIs.jl (also affects HTTP.jl)

Description The URIs.jl and HTTP.jl packages allowed the construction of URIs containing CR/LF characters. If user input was not otherwise escaped or protected, this can lead to a CRLF injection attack. With this simple Julia code, you can inject a custom header named Foo with the value bar: juli...

8.7CVSS7.1AI score0.00381EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2006-7154

Malware in sbrugna...

7.5CVSS6.4AI score0.02261EPSS
SaveExploits2References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.17 views

EUVD-2021-22942

Malware in sbrugna...

6.1CVSS6.3AI score0.00831EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2019-7060

Malware in sbrugna...

5.3CVSS6.2AI score0.04569EPSS
SaveExploits0References29
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2021-25728

Malware in sbrugna...

5.3CVSS5.6AI score0.00815EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2020-6074

Malware in sbrugna...

8.1CVSS8AI score0.0113EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.16 views

EUVD-2019-7206

Malware in sbrugna...

6.1CVSS6.3AI score0.01221EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2021-2046

Malware in sbrugna...

8.2CVSS8.1AI score0.02322EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2005-4742

Malware in sbrugna...

5CVSS6.4AI score0.01897EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2021-25434

Malware in sbrugna...

5.4CVSS5.6AI score0.00381EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2014-2286

Malware in sbrugna...

5.8CVSS6.2AI score0.02417EPSS
SaveExploits0References4
Rows per page
Query Builder