Threats tagged 'brew-bzt-cve-2025-43859'

A vulnerability in the h11 HTTP/1.1 library up to version 0.14.0 allows malformed Chunked-Encoding bodies to be accepted due to lenient parsing of trailing line terminators. This can lead to HTTP request smuggling when combined with a proxy or reverse proxy that parses chunked bodies differently. The issue is fixed in h11 version 0.15.0. Exploitation requires both a buggy h11 and a buggy proxy, so fixing either component mitigates the risk.