vciy

CVE-2021-43797 · Brief

CVEs like CVE-2021-43797

The records whose text reads closest to CVE-2021-43797, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

  1. SwiftNIO HTTP/2 was missing validation on inbound HEADERS frames that let CR, LF, NUL, SP and other control characters…

    Same weakness class, CWE-444.

  2. GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of…

    Same weakness class, CWE-444.

  3. An issue was discovered in Ratpack before 1.7.5.

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

  4. The parser in accepts requests with a space (SP) right after the header name before the colon.

    Same weakness class, CWE-444.

  5. The net/http library in net/textproto/reader.go in Go before 1.4.3 does not properly parse HTTP header keys, which…

    Same weakness class, CWE-444.

  6. It was discovered that Undertow before 1.4.17, 1.3.31 and 2.0.0 processes http request headers with unusual whitespaces…

    Same weakness class, CWE-444.

  7. Netty's HttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permitted

    Same weakness class, CWE-444; same vendor or product family, netty.

  8. Ping Identity PingAccess before 5.3.3 allows HTTP request smuggling via header manipulation.

    Same weakness class, CWE-444.

  9. Improper sanitization of Transfer-Encoding headers in net/http

    Same weakness class, CWE-444.

  10. The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows…

    Same weakness class, CWE-444.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 395,466 records. Fetched 2026-10-30.