CVE-2025-52479

Name of the Vulnerable Software and Affected Versions: HTTP.jl versions prior to 1.10.17 URIs.jl versions prior to 1.6.0

Description: The issue allows the construction of URIs containing CR/LF characters, which can lead to a CRLF injection attack if user input is not properly escaped or protected.

Recommendations: For HTTP.jl versions prior to 1.10.17, upgrade to HTTP.jl v1.10.17. For URIs.jl versions prior to 1.6.0, upgrade to URIs.jl v1.6.0. As a temporary workaround, manually validate any URIs before passing them on to functions in this package.