| Package | Affected versions | Patched versions |
|---|---|---|
| traffic server | ≥ 7.0.0, ≤ 7.1.12≥ 8.0.0, ≤ 8.1.1≥ 9.0.0, ≤ 9.0.1 |
Invalid values in the Content-Length header sent to Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free