CVE-2025-30221
Pitchfork HTTP Request/Response Splitting vulnerability
Résumé
Pitchfork HTTP Request/Response Splitting vulnerability
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Pitchfork is a preforking HTTP server for Rack applications. Versions prior to 0.11.0 are vulnerable to HTTP Response Header Injection when used in conjunction with Rack 3. The issue was fixed in Pitchfork release 0.11.0. No known workarounds are available.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com