Skip to content

Product

debian/ruby-protocol-http1 vulnerabilities

1 published CVE affecting debian/ruby-protocol-http1, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest debian/ruby-protocol-http1 CVEs

Newest publication first

  1. CVE-2023-38697 protocol-http1 HTTP Request/Response Smuggling vulnerability

    Published
    MediumCVSS 5.8

    protocol-http1 provides a low-level implementation of the HTTP/1 protocol. RFC 9112 Section 7.1 defined the format of chunk size, chunk data and chunk extension. The value of Content-Length header should be a string of 0-9 digits, the chunk size should be a string of hex digits a...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.