A vulnerability in h11 versions up to 0.14.0 allows malformed HTTP/1.1 chunked-encoding bodies to be accepted due to improper validation of trailing line terminators. This leniency can cause request smuggling when combined with proxies that parse chunked bodies differently. The issue is fixed in h11 version 0.15.0 and later.