CVEs like CVE-2021-43797
The records whose text reads closest to CVE-2021-43797, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.
- CVE-2026-647850.730SwiftNIO HTTP/2 was missing validation on inbound HEADERS frames that let CR, LF, NUL, SP and other control characters…
Same weakness class, CWE-444.
- CVE-2024-525300.698GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of…
Same weakness class, CWE-444.
- CVE-2019-175130.728An issue was discovered in Ratpack before 1.7.5.
Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.
- CVE-2021-229590.696The parser in accepts requests with a space (SP) right after the header name before the colon.
Same weakness class, CWE-444.
- CVE-2015-57390.702The net/http library in net/textproto/reader.go in Go before 1.4.3 does not properly parse HTTP header keys, which…
Same weakness class, CWE-444.
- CVE-2017-121650.716It was discovered that Undertow before 1.4.17, 1.3.31 and 2.0.0 processes http request headers with unusual whitespaces…
Same weakness class, CWE-444.
- CVE-2026-500200.755Netty's HttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permitted
Same weakness class, CWE-444; same vendor or product family, netty.
- CVE-2021-319230.697Ping Identity PingAccess before 5.3.3 allows HTTP request smuggling via header manipulation.
Same weakness class, CWE-444.
- CVE-2022-17050.712Improper sanitization of Transfer-Encoding headers in net/http
Same weakness class, CWE-444.
- CVE-2015-57400.708The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows…
Same weakness class, CWE-444.
computed Similarity is computed, not recorded. Model Forge pro. Drawn from 395,466 records. Fetched 2026-10-30.