CVE-2020-36309

The CVE-2020-36309 entry concerns ngx_http_lua_module (lua-nginx-module) in OpenResty, where unsafe characters in an argument used to mutate a URI or headers can be exploited. The issue affects the lua-nginx-module before 0.10.16 and is associated with potential HTTP request smuggling and related...