Description
This affects all versions before 10.1.14 and from 10.2.0 to 10.2.4 of package com.typesafe.akka:akka-http-core. It allows multiple Transfer-Encoding headers.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | com.typesafe.akka:akka-http-core | all versions before 10.1.14 and from 10.2.0 to 10.2.4 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.typesafe.akka:akka-http-core | >= 10.2.0, < 10.2.4 | 10.2.4 | GHSA-2w7w-2j92-44hx |
| Maven | com.typesafe.akka:akka-http-core | < 10.1.14 | 10.1.14 | GHSA-2w7w-2j92-44hx |