capnproto

capnproto

Debian BookwormDebian Bookworm
Debian Bookwormdeb.debian.org
capnproto.orgcapnproto.org
Releases1
Last Release
tool for working with the Cap'n Proto data interchange format
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2026-32239NVD↗
< 1.4.06.5 MEDIUM—

Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, a negative Content-Length value was converted to unsigned, treating it as an impossibly large length instead. In theory, this bug could enable HTTP request/response smuggling. This vulnerability is fixed in 1.4.0.

CVE-2026-32240NVD↗
< 1.4.06.5 MEDIUM—

Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, when using Transfer-Encoding: chunked, if a chunk's size parsed to a value of 2^64 or larger, it would be truncated to a 64-bit integer. In theory, this bug could enable HTTP request/response smuggling. This vulnerability is fixed in 1.4.0.