VYPR

apk package

chainguard/chaos-tproxy

pkg:apk/chainguard/chaos-tproxy

Vulnerabilities (2)

  • CVE-2021-32715Jul 7, 2021
    affected < 0.5.4-r2fixed 0.5.4-r2

    hyper is an HTTP library for rust. hyper's HTTP/1 server code had a flaw that incorrectly parses and accepts requests with a `Content-Length` header with a prefixed plus sign, when it should have been rejected as illegal. This combined with an upstream HTTP proxy that doesn't par

  • CVE-2021-32714Jul 7, 2021
    affected < 0.5.4-r2fixed 0.5.4-r2

    hyper is an HTTP library for Rust. In versions prior to 0.14.10, hyper's HTTP server and client code had a flaw that could trigger an integer overflow when decoding chunk sizes that are too big. This allows possible data loss, or if combined with an upstream HTTP proxy that allow