https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 07:46:27 +0000 https://vulnerability.circl.lu/vuln/ghsa-wx5j-54mm-rqqq <p><strong>Affected:</strong> Maven: io.netty:netty-codec-http, Maven: org.jboss.netty:netty, Maven: io.netty:netty</p> <p>### Impact</p> <p>Netty currently just skips control chars when these are present at the beginning / end of the header name. We should better fail fast as these are not allowed by the spec and could lead to HTTP request smuggling.</p> <p>Failing to do the validation might cause netty to &#34;sanitize&#34; header names before it forward these to another remote system when used as proxy. This remote system can&#39;t see the invalid usage anymore and so not do the validation itself.</p> <p><strong>Affected:</strong> Maven: io.netty:netty-codec-http, Maven: org.jboss.netty:netty, Maven: io.netty:netty</p> <p>### Impact</p> <p>Netty currently just skips control chars when these are present at the beginning / end of the header name. We should better fail fast as these are not allowed by the spec and could lead to HTTP request smuggling.</p> <p>Failing to do the validation might cause netty to &#34;sanitize&#34; header names before it forward these to another remote system when used as proxy. This remote system can&#39;t see the invalid usage anymore and so not do the validation itself.</p> https://vulnerability.circl.lu/vuln/ghsa-wx5j-54mm-rqqq