high7.5
CVE-2026-65370
ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding which could result in request smuggling attacks.
Impact
ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding which could result in request smuggling attacks. This vulnerability is addressed in servicetalk version 0.42.65.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Servicetalk | before 0.42.65 |