GrepRules
Sign inPublish rule
Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
4797
Downloads
12.4M
Verified
4797
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
1 rules matched. Showing 1 loaded rules.
Publish rule
CVE-2025-53643: Aiohttp Httppayloadparser Unparsed Trailerscve-2025-53643-aiohttp-httppayloadparser-unparsed-trailers

The HttpPayloadParser instantiation is missing the `headers_parser` argument. In pure-Python versions of aiohttp prior to 3.12.14, trailer sections in chunked requests were discarded without structural validation, leading to HTTP request smuggling (CVE-2025-53643) as front-end proxies might interpret the malformed payload differently. Ensure a capability to

PythonCVE-2025-53643CWE-444
by Provallyupdated 2026-06-12Apache-2.0
3.6K0 direct3.6K via packs
70
All matching rules loaded.