HTTP request smuggling.

Pingora vulnerable to HTTP Request Smuggling via Premature Upgrade

• HTTP request smuggling

<0.8.0 · fixed in 0.8.0

Duplicate Advisory: HTTP Request Smuggling via Premature Upgrade

• HTTP request smuggling

<0.8.0 · fixed in 0.8.0

Duplicate Advisory: HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing

• HTTP request smuggling

<0.8.0 · fixed in 0.8.0

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Services Client-Side Request Smuggling Vulnerability

• Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
• Cisco Secure Firewall Threat Defense (FTD) Software
• HTTP request smuggling

HTTP request smuggling in Akamai Ghost

• Akamai Ghost
• HTTP request smuggling

Cloud Suite and Privilege Access Service– HTTP request smuggling vulnerability

• Delinea Inc. Cloud Suite and Privileged Access Service
• HTTP request smuggling

HTTP request smuggling in Fortinet FortiOS

• Fortinet FortiOS
• HTTP request smuggling

Libsoup: libsoup: http request smuggling via malformed chunk headers

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• HTTP request smuggling

Libsoup: soupserver: denial of service via http request smuggling

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• HTTP request smuggling

HTTP Request/Response Smuggling in Altitude Communication Server

• Altitude Communication Server
• HTTP request smuggling

Vert.x Web static handler component cache can be manipulated to deny the access to static files

• HTTP request smuggling

<4.5.24 || >=5.0.0.CR1, <5.0.7 · fixed in 4.5.24, 5.0.7

h3 v1 has Request Smuggling (TE.TE) issue

• HTTP request smuggling

<1.15.5 · fixed in 1.15.5

AIOHTTP has unicode match groups in regexes for ASCII protocol elements

• HTTP request smuggling

<3.13.3 · fixed in 3.13.3

AIOHTTP's unicode processing of header values could cause parsing discrepancies

• HTTP request smuggling

<3.13.3 · fixed in 3.13.3

HTTP Request Smuggling in Quest Coexistence Manager for Notes

• Quest Coexistence Manager for Notes
• HTTP request smuggling

Member Login Script 3.3 Client-Side Request Desynchronization Vulnerability

• Phpjabbers Member Login Script
• HTTP request smuggling

Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins)

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• HTTP request smuggling

Outsystems Platform Server 11.18.1.37828 allows attackers to cause a denial of service via a crafted content-length value mismatching the body length.

• HTTP request smuggling

Akamai Ghost on Akamai CDN edge servers before 2025-11-17 has a chunked request body processing error that can result in HTTP request smuggling.

• HTTP request smuggling

HTTP Header Smuggling via Trailer Merge

• lighttpd
• HTTP request smuggling

Hono vulnerable to Vary Header Injection leading to potential CORS Bypass

• Other injection
• HTTP request smuggling

<4.10.3 · fixed in 4.10.3

HTTP Desynchronisation in Vertex AI for certain third-party models

• Google Cloud Vertex AI: Partner Models for MaaS
• Google Cloud Vertex AI: Open Models for MaaS
• HTTP request smuggling

Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability

• HTTP request smuggling

>=8.0.0, <8.0.21 || >=9.0.0, <9.0.10 || >=10.0.0-rc.1.25451.107, <10.0.0-rc.2.25502.107 · fixed in 8.0.21, 9.0.10, 10.0.0-rc.2.25502.107

Server-side request forgery in Oracle Corporation Oracle Configurator

• Oracle Corporation Oracle Configurator
• Path traversal
• Other injection

Http4s vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section

• HTTP request smuggling

<0.23.31 · fixed in 0.23.31

WatchGuard Firebox Authentication Portal Request Smuggling Vulnerability

• WatchGuard Fireware OS
• HTTP request smuggling

A Host Header Injection vulnerability in Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via supplying a crafted URL.

• Other injection
• HTTP request smuggling

Netty vulnerable to request smuggling due to incorrect parsing of chunk extensions

• HTTP request smuggling

<4.1.125.Final || >=4.2.0.Alpha1, <4.2.5.Final · fixed in 4.1.125.Final, 4.2.5.Final

Eventlet affected by HTTP request smuggling in unparsed trailers

• HTTP request smuggling

<0.40.3 · fixed in 0.40.3

HTTP request smuggling in AkamaiGhost

• AkamaiGhost
• HTTP request smuggling

mitmproxy binaries embed a vulnerable python-hyper/h2 dependency

• HTTP request smuggling
• CWE-1395

<12.1.2 · fixed in 12.1.2

HTTP request smuggling in AkamaiGhost

• AkamaiGhost
• HTTP request smuggling

EspoCRM is vulnerable to access denial through double slash in URI corrupting router cache

• espocrm
• HTTP request smuggling

AIOHTTP is vulnerable to HTTP Request/Response Smuggling through incorrect parsing of chunked trailer sections

• HTTP request smuggling

<3.12.14 · fixed in 3.12.14

Next.JS vulnerability can lead to DoS via cache poisoning

• HTTP request smuggling

>=15.0.4-canary.51, <15.1.8 · fixed in 15.1.8

Next.js has a Cache poisoning vulnerability due to omission of the Vary header

• HTTP request smuggling

>=15.3.0, <15.3.3 · fixed in 15.3.3

Ruby WEBrick read_headers method can lead to HTTP Request/Response Smuggling

• HTTP request smuggling

<1.8.2 · fixed in 1.8.2

Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies

• HTTP request smuggling

>=4.2.0, <4.2.3 || >=4.1.0, <4.1.8 || >=4.0.0, <=4.0.9 || <3.1.10 · fixed in 4.2.3, 4.1.8, 3.1.10

Duplicate Advisory: Pingora Request Smuggling and Cache Poisoning

• HTTP request smuggling

<0.5.0 · fixed in 0.5.0

Pingora Request Smuggling and Cache Poisoning

• HTTP request smuggling

>=0.0.0-0, <0.5.0 · fixed in 0.5.0

HTTP request smuggling in node

• node
• HTTP request smuggling

HTTP Request Smuggling in Google Cloud Classic Application Load Balancer due to Improper Chunked Encoding Validation

• Google Cloud Classic Application Load Balancer
• HTTP request smuggling

HTTP request smuggling in varnish-software Varnish Cache

• varnish-software Varnish Cache
• HTTP request smuggling

Radware Cloud Web Application Firewall (WAF) before 2025-05-07 allows remote attackers to bypass firewall filters by placing random data in the HTTP request body when using the HTTP GET method.

• HTTP request smuggling

h11 accepts some malformed Chunked-Encoding bodies

• HTTP request smuggling

<0.16.0 · fixed in 0.16.0

An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request.

• HTTP request smuggling

croogo Host header injection

• Other injection
• HTTP request smuggling

<=3.0.2 · no fixed version yet

CVE-2025-1386- Query smuggling in ch-go library

• HTTP request smuggling

<0.65.0 · fixed in 0.65.0

RoadRunner is at risk of HTTP Request/Response Smuggling through vulnerable dependency

• HTTP request smuggling
• CWE-1395

<2025.1.0 · fixed in 2025.1.0

Apache Traffic Server: Malformed chunked message body allows request smuggling

• Apache Software Foundation Apache Traffic Server
• HTTP request smuggling

Remix and React Router allow URL manipulation via Host / X-Forwarded-Host headers

• HTTP request smuggling

>=7.0.0, <7.4.1 · fixed in 7.4.1

IBM Cognos Controller HTTP response smuggling

• IBM Cognos Controller
• IBM Controller
• HTTP request smuggling

HTTP request smuggling in varnish-software Varnish Cache

• varnish-software Varnish Cache
• HTTP request smuggling

Gunicorn HTTP Request/Response Smuggling vulnerability

• HTTP request smuggling

<22.0.0 · fixed in 22.0.0

HTTP Request Smuggling in netease-youdao/qanything

• netease-youdao/qanything
• HTTP request smuggling

HTTP request smuggling in JetBrains Ktor

• JetBrains Ktor
• HTTP request smuggling

HTTP Response Smuggling Vulnerability in libhv

• ithewei libhv
• HTTP request smuggling

In Perfex Crm < 3.2.1, an authenticated attacker can send a crafted HTTP POST request to the affected upload_sales_file endpoint.

• HTTP request smuggling
• CWE-1287

Envoyproxy: openshift service mesh envoy http header sanitization bypass leading to dos and unauthorized access

• Red Hat OpenShift Service Mesh 2
• HTTP request smuggling

In Menlo On-Premise Appliance before 2.88, web policy may not be consistently applied properly to intentionally malformed client requests.

• HTTP request smuggling