Количество 15
Количество 15
CVE-2026-94439
When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP. The impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP.
CVE-2026-94439
When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP. The impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP.
CVE-2026-94439
When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP. The impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP.
CVE-2026-94439
HTTP/1 server connection desynchronization after 2xx CONNECT response in net/http
CVE-2026-94439
When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT ...
GHSA-2gfw-j3c5-j46w
When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP. The impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP.
openSUSE-SU-2026:22095-1
Security update for go1.26
SUSE-SU-2026:4629-1
Security update for go1.26
openSUSE-SU-2026:22093-1
Security update for go1.27
SUSE-SU-2026:4625-1
Security update for go1.27
RLSA-2026:86203
Important: go-toolset:rhel8 security, bug fix, and enhancement update
RLSA-2026:86196
Important: golang security, bug fix, and enhancement update
RLSA-2026:86093
Important: golang security, bug fix, and enhancement update
SUSE-SU-2026:4867-1
Security update for go1.26-openssl
SUSE-SU-2026:4866-1
Security update for go1.26-openssl
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-94439 When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP. The impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP. | CVSS3: 7.5 | 0% Низкий | 18 дней назад |
 | CVE-2026-94439 When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP. The impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP. | CVSS3: 6.5 | 0% Низкий | 18 дней назад |
 | CVE-2026-94439 When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP. The impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP. | CVSS3: 7.5 | 0% Низкий | 18 дней назад |
 | CVE-2026-94439 HTTP/1 server connection desynchronization after 2xx CONNECT response in net/http | CVSS3: 7.5 | 0% Низкий | 11 дней назад |
| CVE-2026-94439 When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT ... | CVSS3: 7.5 | 0% Низкий | 18 дней назад |
| GHSA-2gfw-j3c5-j46w When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP. The impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP. | CVSS3: 7.5 | 0% Низкий | 18 дней назад |
 | openSUSE-SU-2026:22095-1 Security update for go1.26 | 13 дней назад | ||
| SUSE-SU-2026:4629-1 Security update for go1.26 | 14 дней назад | ||
| openSUSE-SU-2026:22093-1 Security update for go1.27 | 13 дней назад | ||
| SUSE-SU-2026:4625-1 Security update for go1.27 | 15 дней назад | ||
 | RLSA-2026:86203 Important: go-toolset:rhel8 security, bug fix, and enhancement update | 6 дней назад | ||
| RLSA-2026:86196 Important: golang security, bug fix, and enhancement update | 5 дней назад | ||
| RLSA-2026:86093 Important: golang security, bug fix, and enhancement update | 5 дней назад | ||
| SUSE-SU-2026:4867-1 Security update for go1.26-openssl | 4 дня назад | ||
| SUSE-SU-2026:4866-1 Security update for go1.26-openssl | 4 дня назад |
Уязвимостей на страницу