PT-2026-92407

Name of the Vulnerable Software and Affected Versions Http4s versions prior to 0.23.35 Http4s versions prior to 1.0.0-M47 Description Ember's chunk decoder parses the chunk-size token leniently by trimming whitespace and accepting leading plus or minus signs, which deviates from the requirement f...