Vulnerabilities affecting this package (1)
| Vulnerability |
Summary |
Fixed by |
VCID-7y8a-8can-nba1
Aliases:
CVE-2025-22871
GHSA-g9pc-8g42-g6vq
|
RoadRunner is at risk of HTTP Request/Response Smuggling through vulnerable dependency
The net/http package dependency used by RoadRunner improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.
|
There are no reported fixed by versions.
|
Vulnerabilities fixed by this package (0)
| Vulnerability |
Summary |
Aliases |
|
This package is not known to fix vulnerabilities.
|