TI-2024-01052 CVE-2024-1135 · GHSA-w3h3-4rj7-4ph4
HTTP Request Smuggling in benoitc/gunicorn
Priority MEDIUM 46
Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities.
RHSA-2024:2727
Red Hat OpenStack Platform 17.1 (python-gunicorn) security update
Released 2024-05-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenStack Platform 17.1 python-gunicorn-20.0.4-7.el9ost, python3-gunicorn-20.0.4-7.el9ost