Vulnerabilidades do Capnproto Capnproto

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Capnproto Capnproto: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:capnproto:capnproto

CVE-2026-32240 Média · 6.5 CWE-197 12/03/2026

Cap'n Proto: Integer overflow in KJ-HTTP chunk size

Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, when using Transfer-Encoding: chunked, if a chunk's size parsed to a value of 2^64 or larger, it would be truncated to a 64-bit integer. In theory, this bug could enable HTTP request/response smuggling. This vulnerability is fixed in 1.4.0.

CVE-2026-32239 Média · 6.5 CWE-190 12/03/2026

Cap'n Proto has an integer overflow in KJ-HTTP

Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, a negative Content-Length value was converted to unsigned, treating it as an impossibly large length instead. In theory, this bug could enable HTTP request/response smuggling. This vulnerability is fixed in 1.4.0.