HTTP vulnerabilities (Julia)
16 vulnerabilities.
-
HTTPJulia WebSocket reader data race in auto-PONG/CLOSE-echo handling in HTTP.jl No score -
HTTPJulia Path traversal in the HTTP.jl static file server via separator/absolute path segments No score -
HTTPJulia HTTP/2 client HPACK desynchronization via header blocks for unknown streams in HTTP.jl No score -
HTTPJulia WebSocket default Origin check ignores scheme and port in HTTP.jl No score -
HTTPJulia HTTP/1 request smuggling via bare-LF, lenient chunk size, and TE/CL handling in HTTP.jl server No score -
HTTPJulia Cookie jar accepts `Secure/__Host-/__Secure-` cookies from non-secure origins in HTTP.jl No score -
HTTPJulia Predictable WebSocket masking key and handshake nonce in HTTP.jl client No score -
HTTPJulia CR/LF injection in server-sent events (SSE) fields in HTTP.jl No score -
HTTPJulia Redirect credential leakage across scheme/port in HTTP.jl No score -
HTTPJulia Open redirect in the HTTP.jl static file server canonical redirects No score -
HTTPJulia Insufficient HTTP/2 pseudo-header and Host/:authority validation in HTTP.jl server No score -
HTTPJulia HTTP/1 client request smuggling via CR/LF in method, target, or host in HTTP.jl No score -
HTTPJulia Unbounded HTTP/2 concurrent streams and Rapid Reset denial of service in HTTP.jl server No score -
HTTPJulia Thread-safety and out-of-bounds reads in the HTTP.jl content-type sniffer No score -
HTTPJulia HTTP.jl vulnerable to Header injection/Response splitting via header construction. 8.7 High -
HTTPJulia HTTP.jl vulnerable to CR/LF Injection in URIs 7.7 High