Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-0865
Not yet scoredAwaiting CVSS assessment
Description
User-controlled header names and values containing newlines can allow injecting HTTP headers.
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
User-controlled header names and values containing newlines can allow injecting HTTP headers.
GitHub