2 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-31842
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tinyproxy through 1.11.3 is vulnerable to HTTP request parsing desynchronization due to a case-sensitive comparison of the Transfer-Encoding header in src/reqs....
PT-2026-30811
Name of the Vulnerable Software and Affected Versions Tinyproxy versions 1.0 through 1.11.3 Description An issue exists in the way the Transfer-Encoding header is parsed in src/reqs.c. The is chunked transfer function uses strcmp to compare the header value against "chunked", failing to account f...