Threats affecting pkg:brew/linode-cli

CVE-2025-43859 is a critical vulnerability in h11 (used by linode-cli) where malformed HTTP/1.1 chunked-encoding bodies are accepted due to lenient parsing of trailing line terminators. This discrepancy can lead to HTTP request smuggling when combined with a buggy reverse proxy that parses chunked bodies differently. The vulnerability allows attackers to bypass protections or potentially steal credentials by manipulating request boundaries. It is fixed in h11 version 0.15.0 and linode-cli version 5.56.3_1.