~ / search / GHSA-g4x3-mfpj-f335

GHSA-g4x3-mfpj-f335

chasquid HTTP Request/Response Smuggling vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2023-52354

Packages

EcosystemPackageAffectedFixed in
Go github.com/albertito/chasquid < 1.13 1.13

Details

As written in the advisory (Markdown source, shown as plain text).

chasquid before 1.13 allows SMTP smuggling because LF-terminated lines are accepted.

References

External links from the advisory. They lead to third-party sites.