Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:21:16 +0000 EUVD-2026-309067 https://cve.radiocsirt.org/vuln/euvd-2026-309067 EUVD-2026-309067 https://cve.radiocsirt.org/vuln/euvd-2026-309067 fkie_cve-2026-40561 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40561 <p>Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence.</p> <p>Starlet incorrectly prioritizes &#34;Content-Length&#34; over &#34;Transfer-Encoding: chunked&#34; when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence.</p> <p>An attacker could exploit this to smuggle malicious HTTP requests via a front-end reverse proxy.</p> <p>Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence.</p> <p>Starlet incorrectly prioritizes &#34;Content-Length&#34; over &#34;Transfer-Encoding: chunked&#34; when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence.</p> <p>An attacker could exploit this to smuggle malicious HTTP requests via a front-end reverse proxy.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-40561 GHSA-2xqx-75wg-w86v https://cve.radiocsirt.org/vuln/ghsa-2xqx-75wg-w86v <p>Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence.</p> <p>Starlet incorrectly prioritizes &#34;Content-Length&#34; over &#34;Transfer-Encoding: chunked&#34; when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence.</p> <p>An attacker could exploit this to smuggle malicious HTTP requests via a front-end reverse proxy.</p> <p>Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence.</p> <p>Starlet incorrectly prioritizes &#34;Content-Length&#34; over &#34;Transfer-Encoding: chunked&#34; when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence.</p> <p>An attacker could exploit this to smuggle malicious HTTP requests via a front-end reverse proxy.</p> https://cve.radiocsirt.org/vuln/ghsa-2xqx-75wg-w86v UBUNTU-CVE-2026-40561 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-40561 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: starlet, Ubuntu:18.04:LTS: starlet, Ubuntu:20.04:LTS: starlet, Ubuntu:22.04:LTS: starlet, Ubuntu:24.04:LTS: starlet, Ubuntu:25.10: starlet, Ubuntu:26.04:LTS: starlet</p> <p>Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starlet incorrectly prioritizes &#34;Content-Length&#34; over &#34;Transfer-Encoding: chunked&#34; when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence. An attacker could exploit this to smuggle malicious HTTP requests via a front-end reverse proxy.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: starlet, Ubuntu:18.04:LTS: starlet, Ubuntu:20.04:LTS: starlet, Ubuntu:22.04:LTS: starlet, Ubuntu:24.04:LTS: starlet, Ubuntu:25.10: starlet, Ubuntu:26.04:LTS: starlet</p> <p>Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starlet incorrectly prioritizes &#34;Content-Length&#34; over &#34;Transfer-Encoding: chunked&#34; when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence. An attacker could exploit this to smuggle malicious HTTP requests via a front-end reverse proxy.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-40561