CVE-2026-38969

Name of the Vulnerable Software and Affected Versions webrick versions prior to 1.9.3

Description WEBrick reparses the trailer Content-Length into the canonical request state, which enables request smuggling. Request smuggling is a technique that interferes with the way a website processes sequences of HTTP requests, potentially allowing an attacker to bypass security controls or poison caches.

Recommendations Update webrick to version 1.9.3 or later.