CVE-2023-39326

score

<0.1

cvss

5.3

epss

1.2%

published

2023-12-06

kev added

—

first seen

2026-10-21

A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body, letting attackers cause servers to read large amounts of data, exploit requires malicious client to send crafted chunked encoding with large metadata segments.