7.5
High
CVE-2026-65370 ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding which could result in request smuggling attacks
Description
ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding which could result in request smuggling attacks. This vulnerability is addressed in servicetalk version 0.42.65.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| servicetalk 0.42 | earliest → < 0.42.65 | 0.42.65 |
References
- github.com github.com
Timeline
- Published
- Last modified