https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 10:58:22 +0000 https://cve.radiocsirt.org/vuln/certfr-2019-avi-633 certfr-2019-avi-633 https://cve.radiocsirt.org/vuln/certfr-2019-avi-633 https://cve.radiocsirt.org/vuln/cnvd-2020-01020 cnvd-2020-01020 https://cve.radiocsirt.org/vuln/cnvd-2020-01020 https://cve.radiocsirt.org/vuln/euvd-2026-58888 EUVD-2026-58888 https://cve.radiocsirt.org/vuln/euvd-2026-58888 https://cve.radiocsirt.org/vuln/fkie_cve-2019-18802 <p>An issue was discovered in Envoy 1.12.0. An untrusted remote client may send an HTTP header (such as Host) with whitespace after the header content. Envoy will treat &#34;header-value &#34; as a different string from &#34;header-value&#34; so for example with the Host header &#34;example.com &#34; one could bypass &#34;example.com&#34; matchers.</p> <p>An issue was discovered in Envoy 1.12.0. An untrusted remote client may send an HTTP header (such as Host) with whitespace after the header content. Envoy will treat &#34;header-value &#34; as a different string from &#34;header-value&#34; so for example with the Host header &#34;example.com &#34; one could bypass &#34;example.com&#34; matchers.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-18802 https://cve.radiocsirt.org/vuln/ghsa-fx83-72pw-c56f <p>An issue was discovered in Envoy 1.12.0. An untrusted remote client may send an HTTP header (such as Host) with whitespace after the header content. Envoy will treat &#34;header-value &#34; as a different string from &#34;header-value&#34; so for example with the Host header &#34;example.com &#34; one could bypass &#34;example.com&#34; matchers.</p> <p>An issue was discovered in Envoy 1.12.0. An untrusted remote client may send an HTTP header (such as Host) with whitespace after the header content. Envoy will treat &#34;header-value &#34; as a different string from &#34;header-value&#34; so for example with the Host header &#34;example.com &#34; one could bypass &#34;example.com&#34; matchers.</p> https://cve.radiocsirt.org/vuln/ghsa-fx83-72pw-c56f https://cve.radiocsirt.org/vuln/gsd-2019-18802 gsd-2019-18802 https://cve.radiocsirt.org/vuln/gsd-2019-18802 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0379-1 <p>Security update for nghttp2</p> <p>Security update for nghttp2</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:0379-1 https://cve.radiocsirt.org/vuln/rhsa-2019:4222 <p>envoy: an untrusted remote client may send HTTP/2 requests that write to the heap outside of the request buffers when the upstream is HTTP/1 envoy: malformed request header may cause bypass of route matchers resulting in escalation of privileges or information disclosure envoy: malformed HTTP request without the Host header may cause abnormal termination of the Envoy process</p> <p>envoy: an untrusted remote client may send HTTP/2 requests that write to the heap outside of the request buffers when the upstream is HTTP/1 envoy: malformed request header may cause bypass of route matchers resulting in escalation of privileges or information disclosure envoy: malformed HTTP request without the Host header may cause abnormal termination of the Envoy process</p> https://cve.radiocsirt.org/vuln/rhsa-2019:4222 https://cve.radiocsirt.org/vuln/suse-su-2020:0722-1 <p>Security update for nghttp2</p> <p>Security update for nghttp2</p> https://cve.radiocsirt.org/vuln/suse-su-2020:0722-1