Threats tagged 'ghsa-4v2q-64x5-xvrc'

Wasmtime versions 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 contain a response splitting vulnerability in the wasi-http p3 component. This flaw allows malicious guests to set unvalidated content-length headers, enabling them to splice an existing body into a new response with an incorrect content-length. This can lead to response splitting or injection attacks.