CVE-2026-65370

Summary

ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding which could result in request smuggling attacks. This vulnerability is addressed in servicetalk version 0.42.65.

Affected Software

VendorProductVersion RangeStatus
Appleservicetalk0 < 0.42.65affected

Weaknesses

  • ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding which could result in request smuggling attacks.

References