VYPR

RubyGems package

agoo

pkg:gem/agoo

Vulnerabilities (1)

  • CVE-2020-7670Jun 10, 2020
    affected <= 2.13.0

    agoo prior to 2.14.0 allows request smuggling attacks where agoo is used as a backend and a frontend proxy also being vulnerable. HTTP pipelining issues and request smuggling attacks might be possible due to incorrect Content-Length and Transfer encoding header parsing. It is pos