A vulnerability in h11 versions before 0.15.0 allows lenient parsing of chunked HTTP message bodies, which can cause request smuggling when combined with a buggy proxy that parses chunked encoding differently. This discrepancy can lead to attackers bypassing protections or stealing credentials by manipulating HTTP requests. The issue is fixed in h11 version 0.15.0.