GrepRules
Sign inPublish rule
Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
4797
Downloads
12.4M
Verified
4797
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
1 rules matched. Showing 1 loaded rules.
Publish rule
CVE-2026-38969: Ruby Webrick Chunked Trailer Injectioncve-2026-38969-ruby-webrick-chunked-trailer-injection

WEBrick indiscriminately appends HTTP chunked trailers to the raw request headers buffer and parses them in conjunction with the primary request headers using HTTPUtils::parse_header. This bypasses the trailer/header boundary and allows trailers to overwrite authoritative headers like Content-Length or Host, enabling HTTP Request Smuggling. The patch cleanly

RubyCVE-2026-38969CWE-113CWE-444
by Provallyupdated 2026-09-02Apache-2.0
1.3K0 direct1.3K via packs
74
All matching rules loaded.