Transfer-Encoding not treated as hop-by-hop

Insufficient Validation of HTTP/1.x Headers

sslheaders plugin extracts information from the client certificate and sets headers in the request based on the configuration of the plugin

Apache Traffic Server: Out-of-bounds reads while parsing DNS responses

Apache Traffic Server: Nullptr dereference in net_write_io on a POST half-close with chunked response

Apache Traffic Server: PROXY protocol parsing has port truncation and a stack overflow

Apache Traffic Server: Integer-handling errors in HPACK/XPACK decoding corrupt memory

Apache Traffic Server: Buffer overflow via Host field that has a long string value

Apache Traffic Server: Dropping chunked trailers stalls a passthrough transfer until timeout

Apache Traffic Server: Request smuggling via chunked extension quoted-string parsing

Apache Traffic Server: Regex mappings match with malicious domain names

Apache Traffic Server: URL and port parsing errors allow access-control bypass

Apache Traffic Server: HPACK encoder desynchronizes from the decoder after a failed header encode

Apache Traffic Server: HTTP/2 multiplexed origin sessions are reused without certificate re-verification