This affects all versions before 10.1.14 and from 10.2.0 to 10.2.4 of package com.typesafe.akka:akka-http-core. It allows multiple Transfer-Encoding headers.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| com.typesafe.akka:akka-http-core(Maven) | 10.2.0 | 10.2.4 | N/A |
| com.typesafe.akka:akka-http-core(Maven) | 0 | 10.1.14 | N/A |
CVSS Metrics
