Threats tagged 'ghsa-c599-gp9v-cp79'

CVE-2026-93562 is a medium severity vulnerability in the Netty HTTP/1 decoder component used by the Red Hat build of Quarkus 3.27.5.SP2. The flaw involves incomplete validation of malformed Transfer-Encoding headers, enabling HTTP request smuggling attacks. This vulnerability allows remote attackers to inject arbitrary HTTP requests, potentially bypassing security controls or accessing unauthorized resources. Red Hat has released an update in Quarkus 3.33.3.SP2 that addresses this and other vulnerabilities.