Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-65370

ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding which could result in request smuggling attacks. This vulnerability is addressed in servicetalk version 0.42.65

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
apple

Description

ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding which could result in request smuggling attacks. This vulnerability is addressed in servicetalk version 0.42.65.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apple servicetalk

  • 0 to < 0.42.65affected

References