High severity7.5NVD Advisory· Published Aug 12, 2026· Updated Oct 23, 2026
CVE-2026-65370
CVE-2026-65370
Description
ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding which could result in request smuggling attacks. This vulnerability is addressed in servicetalk version 0.42.65.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2>=0.42.65+ 1 more
- (no CPE)range: >=0.42.65
- cpe:2.3:a:apple:servicetalk:*:*:*:*:*:*:*:*range: <0.42.65
Patches
Vulnerability mechanics
References
1- github.com/apple/servicetalk/security/advisories/GHSA-56h2-h3h4-m9x6nvdThird Party Advisory
News mentions
0No linked articles in our index yet.