Vulnerability in rivet project

[ankitdn]

while working in rivet project, I found a vulnerability in the h3 package caused by a case-sensitive check for the Transfer-Encoding: chunked header. By sending a mixed-case header (e.g., ChunKed), an attacker can desynchronize requests behind TCP/load balancers, potentially leading to request smuggling and unauthorized request handling.

CVE Report
CVE Link

[linear]

RVT-5335