CVE-2026-65370

Name of the Vulnerable Software and Affected Versions ServiceTalk versions prior to 0.42.65

Description ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding, which can lead to request smuggling attacks. Request smuggling is a technique that interferes with the way a website processes sequences of HTTP requests, potentially allowing an attacker to bypass security controls or poison caches.

Recommendations Update to version 0.42.65.