https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-08T00:40:22.930588+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2019-19330 CVE-2019-19330 2026-10-08T00:40:26.508915+00:00

The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.

 https://vulnerability.circl.lu/vuln/usn-4212-1 USN-4212-1 — haproxy vulnerability 2026-10-08T00:40:26.509043+00:00

Affected: Ubuntu:18.04:LTS: haproxy

Tim Düsterhus discovered that HAProxy incorrectly handled certain HTTP/2 headers. An attacker could possibly use this issue to execute arbitrary code through CRLF injection.