2 matches found
Commonmarker Input Validation Error Vulnerability
Commonmarker is a Ruby wrapper for comrak CommonMark parser by the individual developer Garen Torikian. An input validation error vulnerability exists in versions of CommonMarker prior to 0.23.4, which stems from an integer overflow vulnerability. An attacker could exploit this vulnerability to...
CVE-2021-41084
http4s is an open source scala interface for HTTP. In affected versions http4s is vulnerable to response-splitting or request-splitting attacks when untrusted user input is used to create any of the following fields: Header names Header.nameå, Header values Header.value, Status reason phrases...