https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T09:16:12.299486+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-32239 CVE-2026-32239 — Cap'n Proto has an integer overflow in KJ-HTTP 2026-10-07T09:16:12.836229+00:00

Affected: capnproto

Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, a negative Content-Length value was converted to unsigned, treating it as an impossibly large length instead. In theory, this bug could enable HTTP request/response smuggling. This vulnerability is fixed in 1.4.0.

 https://vulnerability.circl.lu/vuln/usn-8650-1 USN-8650-1 — capnproto vulnerabilities 2026-10-07T09:16:12.836345+00:00

Affected: Ubuntu:Pro:18.04:LTS: capnproto, Ubuntu:Pro:20.04:LTS: capnproto, Ubuntu:Pro:22.04:LTS: capnproto, Ubuntu:Pro:24.04:LTS: capnproto, Ubuntu:Pro:26.04:LTS: capnproto

Chanho Kim and Jihyeok Han discovered that Cap'n Proto incorrectly handled negative Content-Length values or excessively large chunk sizes when processing HTTP messages. An attacker could possibly use these issues to cause HTTP messages to be interpreted inconsistently, resulting in HTTP request or response smuggling. (CVE-2026-32239, CVE-2026-32240)