CVE-2026-64785: Niohttp2 Http2tohttp1codec Swift Cwe 000 Cve 2026 64785
Incomplete validation of HTTP/2 header or pseudo-header values allows space and control characters (0x01-0x1F, 0x20, 0x7F) through to HTTP/1.1 request lines or headers, potentially enabling HTTP request smuggling or response splitting (CWE-444, CWE-113).
Swiftgreprules fetch cve-2026-64785-niohttp2-http2tohttp1codec-swift-cwe-000-cve-2026-64785 --engine opengrepDescription
Incomplete validation of HTTP/2 header or pseudo-header values allows space and control characters (0x01-0x1F, 0x20, 0x7F) through to HTTP/1.1 request lines or headers, potentially enabling HTTP request smuggling or response splitting (CWE-444, CWE-113).
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.