https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T12:14:09.216665+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-30221 CVE-2025-30221 — Pitchfork HTTP Request/Response Splitting vulnerability 2026-10-07T12:14:09.232627+00:00

Affected: Shopify pitchfork

Pitchfork is a preforking HTTP server for Rack applications. Versions prior to 0.11.0 are vulnerable to HTTP Response Header Injection when used in conjunction with Rack 3. The issue was fixed in Pitchfork release 0.11.0. No known workarounds are available.