CVE-2021-23339

Published February 17th, 2021

View on NVD ↗

CVSS v3

MEDIUM

CVSS v2

6.4

MEDIUM

Affected

PROJECT

Description

This affects all versions before 10.1.14 and from 10.2.0 to 10.2.4 of package com.typesafe.akka:akka-http-core. It allows multiple Transfer-Encoding headers.

akka/akka-http

The Streaming-first HTTP server/module of Akka

GitHub

1.35K