Description
Hotels Styx through 1.0.0.beta8 allows HTTP response splitting due to CRLF Injection. This is exploitable if untrusted user input can appear in a response header.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.hotels.styx:styx-api | < 1.0.0-rc1 | 1.0.0-rc1 | GHSA-6v7p-v754-j89v |