rpm package
opensuse/capnproto&distro=openSUSE Leap 16.0
pkg:rpm/opensuse/capnproto&distro=openSUSE%20Leap%2016.0
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-32240 | Med | 6.5 | < 1.4.0-160000.1.1 | 1.4.0-160000.1.1 | Mar 12, 2026 | Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, when using Transfer-Encoding: chunked, if a chunk's size parsed to a value of 2^64 or larger, it would be truncated to a 64-bit integer. In theory, this bug could enable HTTP request/respons | |
| CVE-2026-32239 | Med | 6.5 | < 1.4.0-160000.1.1 | 1.4.0-160000.1.1 | Mar 12, 2026 | Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, a negative Content-Length value was converted to unsigned, treating it as an impossibly large length instead. In theory, this bug could enable HTTP request/response smuggling. This vulnerabi |
- affected < 1.4.0-160000.1.1fixed 1.4.0-160000.1.1
Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, when using Transfer-Encoding: chunked, if a chunk's size parsed to a value of 2^64 or larger, it would be truncated to a 64-bit integer. In theory, this bug could enable HTTP request/respons
- affected < 1.4.0-160000.1.1fixed 1.4.0-160000.1.1
Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, a negative Content-Length value was converted to unsigned, treating it as an impossibly large length instead. In theory, this bug could enable HTTP request/response smuggling. This vulnerabi