Shopify/pitchfork

Releases24

Frequency1 month 3 weeks

Last Release 5 months ago

Stars831

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-30221 ↗	Mar 27, 2025Thursday, 27 March 2025, 15:16	—	—
Pitchfork is a preforking HTTP server for Rack applications. Versions prior to 0.11.0 are vulnerable to HTTP Response Header Injection when used in conjunction with Rack 3. The issue was fixed in Pitchfork release 0.11.0. No known workarounds are available.