CVE-2026-64785: Niohttp2 Http2tohttp1codec Swift Cwe 000 Cve 2026 64785cve-2026-64785-niohttp2-http2tohttp1codec-swift-cwe-000-cve-2026-64785
Incomplete validation of HTTP/2 header or pseudo-header values allows space and control characters (0x01-0x1F, 0x20, 0x7F) through to HTTP/1.1 request lines or headers, potentially enabling HTTP request smuggling or response splitting (CWE-444, CWE-113).