Vulnerabilidades en mtrudel
24 resultadosCVE-2026-39804HIGHWebSocket permessage-deflate inflate has no output-size cap in banditEPSS 0.8%CVE-2026-75484MEDIUMHTTP/2 header field values containing CR, LF or NUL are passed to the application unvalidated in BanditEPSS 0.7%CVE-2026-42786HIGHWebSocket fragmented message reassembly unbounded in banditEPSS 0.6%CVE-2026-39803HIGHHTTP/1 chunked body reader ignores length cap in banditEPSS 0.6%CVE-2026-39806HIGHHTTP/1 chunked decoder infinite loop on requests with trailer fields in banditEPSS 0.6%CVE-2026-74836HIGHHTTP/2 connection-window starvation pins Plug processes indefinitely in BanditEPSS 0.6%CVE-2026-111103HIGHHTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in BanditEPSS 0.6%CVE-2026-39805MEDIUMCL.CL HTTP request smuggling via duplicate Content-Length in banditEPSS 0.6%CVE-2026-105660MEDIUMUnvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in BanditEPSS 0.6%CVE-2026-105659HIGHHTTP/2 blocked-send deadlines reset on every WINDOW_UPDATE, letting a trickle pin stream processes indefinitely in BanditEPSS 0.6%CVE-2026-108525HIGHHTTP/2 inbound flow control is not enforced, letting a client queue unbounded DATA in stream processes in BanditEPSS 0.6%CVE-2026-111101HIGHHTTP/1.1 chunked request bodies made of 1-byte chunks amplify memory use in BanditEPSS 0.6%CVE-2026-109584HIGHHTTP/2 cookie crumb join expands a small HPACK header block into an unbounded allocation in BanditEPSS 0.6%CVE-2026-110499HIGHClient-chosen HPACK encoder table size is applied uncapped, growing per-connection state with every response in BanditEPSS 0.6%CVE-2026-114216MEDIUMChunk extensions accept bare LF and CR, enabling request smuggling in BanditEPSS 0.6%CVE-2026-113436HIGHQuadratic bignum parsing of Content-Length and Host port values in BanditEPSS 0.6%CVE-2026-115269HIGHHTTP/2 WINDOW_UPDATE and SETTINGS frames reset the request body read timeout in BanditEPSS 0.6%CVE-2026-108529HIGHSETTINGS and stream-0 WINDOW_UPDATE frames trigger quadratic work over blocked streams in BanditEPSS 0.6%CVE-2026-114213HIGHWebSocket 1-byte continuation frames bypass `max_fragmented_message_size` in BanditEPSS 0.6%CVE-2026-39807MEDIUMClient-supplied URI scheme trusted without transport verification in banditEPSS 0.5%