Skip to content
OpenAdvisories

Package · Debian

rust-rouille

4 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-67182 Public exploit

    Rouille 0.3.3 - 3.6.2 HTTP Request Smuggling via proxy Header Injection

    Rouille 0.3.3 through 3.6.2 contains an HTTP request smuggling vulnerability that allows remote attackers to bypass access controls by injecting bare line feed characters (0x0A) into client-supplied request header values that are copied verbatim to upstream c…