Advisory Weakness Curation

HTTP Request Smuggling in Netty Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869.

Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) This advisory has been marked as a false positive.

Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) Netty allows HTTP Request Smuggling because it mishandles `Transfer-Encoding` whitespace (such as a [space]`Transfer-Encoding:chunked line`) and a later `Content-Length` header. This issue exists because of an incomplete fix for CVE-2019-16869.

Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) Netty allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a `[space]Transfer-Encoding:chunked line`) and a later Content-Length header.

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869.