https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 22:20:51 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-25702 cnvd-2021-25702 https://cve.radiocsirt.org/vuln/cnvd-2021-25702 https://cve.radiocsirt.org/vuln/euvd-2026-38090 EUVD-2026-38090 https://cve.radiocsirt.org/vuln/euvd-2026-38090 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7670 <p>agoo prior to 2.14.0 allows request smuggling attacks where agoo is used as a backend and a frontend proxy also being vulnerable. HTTP pipelining issues and request smuggling attacks might be possible due to incorrect Content-Length and Transfer encoding header parsing. It is possible to conduct HTTP request smuggling attacks where `agoo` is used as part of a chain of backend servers due to insufficient `Content-Length` and `Transfer Encoding` parsing.</p> <p>agoo prior to 2.14.0 allows request smuggling attacks where agoo is used as a backend and a frontend proxy also being vulnerable. HTTP pipelining issues and request smuggling attacks might be possible due to incorrect Content-Length and Transfer encoding header parsing. It is possible to conduct HTTP request smuggling attacks where `agoo` is used as part of a chain of backend servers due to insufficient `Content-Length` and `Transfer Encoding` parsing.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-7670 https://cve.radiocsirt.org/vuln/ghsa-h385-52j6-9984 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> RubyGems: agoo</p> <p># Withdrawn reason Withdrawn on 1/13/2021 due to [this comment from the maintainer](https://github.com/ohler55/agoo/issues/88#issuecomment-723580783). This is no longer considered a vulnerability.</p> <p># Original description agoo through 2.12.3 allows request smuggling attacks where agoo is used as a backend and a frontend proxy also being vulnerable. It is possible to conduct HTTP request smuggling attacks by sending the Content-Length header twice. Furthermore, invalid Transfer Encoding headers were found to be parsed as valid which could be leveraged for TE:CL smuggling attacks.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> RubyGems: agoo</p> <p># Withdrawn reason Withdrawn on 1/13/2021 due to [this comment from the maintainer](https://github.com/ohler55/agoo/issues/88#issuecomment-723580783). This is no longer considered a vulnerability.</p> <p># Original description agoo through 2.12.3 allows request smuggling attacks where agoo is used as a backend and a frontend proxy also being vulnerable. It is possible to conduct HTTP request smuggling attacks by sending the Content-Length header twice. Furthermore, invalid Transfer Encoding headers were found to be parsed as valid which could be leveraged for TE:CL smuggling attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-h385-52j6-9984 https://cve.radiocsirt.org/vuln/gsd-2020-7670 gsd-2020-7670 https://cve.radiocsirt.org/vuln/gsd-2020-7670