Skip to content
OpenAdvisories

Package · RubyGems

goliath

1 known vulnerabilities.

1 result · Feed

  • High 7.5

    HTTP Request Smuggling in goliath

    goliath through 1.0.6 allows request smuggling attacks where goliath is used as a backend and a frontend proxy also being vulnerable. It is possible to conduct HTTP request smuggling attacks by sending the Content-Length header twice. Furthermore, invalid Tra…