CVE-2025-3110: Inconsistent Interpretation of HTTP Requests

OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request smuggling when deployed behind a reverse proxy...

ROS-20260505-73-0041

Vulnerability in python3.10 related to failure to take measures to neutralize crlf sequences. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

The vulnerability of the HTTP/2 Python-h2 protocol, related to the failure to eliminate CRLF sequences, allows attackers to compromise data integrity.

The vulnerability of the HTTP/2 protocol and Python-h2 is related to the failure to implement measures to neutralize CRLF sequences. Exploiting this vulnerability allows an attacker operating remotely to compromise data integrity...

The vulnerability of the asynchronous web server ESPAsyncWebServer, which stems from the failure to handle CRLF sequences properly, allows attackers to circumvent existing security restrictions.

The vulnerability of the asynchronous web server ESPAsyncWebServer lies in the lack of measures to neutralize CRLF sequences. Exploiting this vulnerability allows a remote attacker to circumvent existing security restrictions...

The vulnerability of the aiohttp HTTP client, related to the failure to handle CRLF sequences for line termination, allows attackers to send hidden HTTP requests (HTTP Request Smuggling attack).

The vulnerability of the aiohttp HTTP client is related to the lack of measures taken to neutralize CRLF sequences. Exploiting this vulnerability allows an attacker, operating remotely, to send hidden HTTP requests HTTP Request Smuggling attack...