PT-2026-47347

Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Request/Response Splitting' vulnerability in ninenines cowlib allows HTTP response splitting via non-VCHAR bytes in structured-fields string values. cow http struct hd:escape string/2 in cowlib only escapes and ", passing all other...