An issue was discovered in the async-h1 crate before 2.3.0 for Rust. Request smuggling can occur when used behind a reverse proxy.

Published Jan 22, 2021 · Updated Aug 4, 2024 · Assigned by mitre