TI-2020-19191 CVE-2020-37056 · GHSA-682r-rv3j-v5mhCrystal Shard http-protection 0.2.0 - IP Spoofing BypassPriority HIGH 72Crystal Shard http-protection 0.2.0 contains an IP spoofing vulnerability that allows attackers to bypass protection middleware by manipulating request headers.CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00596 · Published 2026-01-30 · No fix listed CWE-290