An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request.
2025-04-22T16:15:44.200
2025-06-23T18:20:26.140
Analyzed
CVSSv3.1: 7.7 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | openresty | lua-nginx-module | ≤ 0.10.26 | Yes |