A vulnerability in h11 versions up to 0.14.0 used by FastAPI allows malformed HTTP/1.1 chunked-encoding bodies to be accepted due to improper validation of trailing line terminators. This leniency can lead to HTTP request smuggling when combined with a buggy reverse proxy that parses chunked bodies differently. The issue is fixed in h11 version 0.15.0.