Design/Logic Flaw

Chicken before 4.8.0 does not properly handle NUL bytes in certain strings, which allows an attacker to conduct "poisoned NUL byte attack."...

nginx protection bypass

It's possible to bypass restrictions with "poisoned NUL bute"...