Threats tagged 'ghsa-9mrj-55p4-qwf4'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.5	CVE-2026-93566Summary Netty skips strict chunk size line validation when the line has no chunk extension (;), so a chunk size line Medium6.52026-09-18GCVE DatabaseCVE-2026-93566 Netty's HTTP decoder skips strict validation of chunk size lines when no chunk extension is present, allowing malformed chunk size lines containing embedded bare carriage return characters to be accepted. This behavior violates RFC 9112's chunk-size syntax and enables HTTP request smuggling attacks. Report on CVE-2026-93566 Vulnerability #ghsa-9mrj-55p4-qwf4	GCVE Database	2026-09-18

Page 1 of 1