GHSA-xx86-5ch4-942vHighCVSS 8.2

HTTP/1 absolute-form Host mismatch is translated to HTTP/2 :authority, overriding the request...

Published
September 18, 2026
Last Modified
September 18, 2026

🔗 CVE IDs covered (1)

📋 Description

HTTP/1 absolute-form Host mismatch is translated to HTTP/2 :authority, overriding the request-target authority

🔗 References (4)