What is GHSA-92x4-7936-ww96?

GHSA-92x4-7936-ww96 is a security advisory published by GitHub Security Advisories with Medium severity. OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header...

Which CVE IDs does GHSA-92x4-7936-ww96 cover?

GHSA-92x4-7936-ww96 covers the following CVE IDs: CVE-2025-3110. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-92x4-7936-ww96?

GHSA-92x4-7936-ww96 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-92x4-7936-ww96MediumCVSS 7.5

OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header...

Vendor

GitHub Security Advisories

Published

July 8, 2026

Last Modified

July 10, 2026

🔗 CVE IDs covered (1)

CVE-2025-3110 →

📋 Description

OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request smuggling when deployed behind a reverse proxy

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-3110
https://openvpn.net/as-docs/as-3-2-release-notes.html
https://github.com/advisories/GHSA-92x4-7936-ww96