CVE-2020-36309

The CVE-2020-36309 entry concerns ngx_http_lua_module (lua-nginx-module) in OpenResty, where unsafe characters in an argument used to mutate a URI or headers can be exploited. The issue affects the lua-nginx-module before 0.10.16 and is associated with potential HTTP request smuggling and related...

CVE-2024-33452

The OpenResty lua-nginx-module (v.0.10.26 and before) contains a flaw allowing a remote attacker to conduct HTTP request smuggling via a crafted HEAD request . This vulnerability, identified as CVE-2024-33452 , can be leveraged to bypass frontend proxy protections, serve malicious responses to us...