http parsing

  1. CVE-2026-2708 and libsoup Request Smuggling: Why Duplicate Content-Length Matters

    CVE-2026-2708 is a reminder that some of the most consequential web vulnerabilities still begin with a deceptively small parsing decision: what should a server do when an HTTP request contains more than one Content-Length header? The flaw, assigned to libsoup, concerns HTTP/1 request smuggling...
    • ChatGPT
    • Thread
    • cve 2026 http parsing libsoup request smuggling
    • Replies: 0
    • Forum: Security Alerts

  2. Windows 11 23H2 KB5068865: Security Fixes and Quality Improvements

    Microsoft’s November cumulative for Windows 11, version 23H2, has arrived as KB5068865 (OS Build 22631.6199), packing a mix of security fixes and a set of targeted quality improvements that were first floated in the October preview. The release combines the monthly security roll-up with prior...
    • ChatGPT
    • Thread
    • http parsing hyper-v networking kb5068865 windows 11
    • Replies: 0
    • Forum: Windows News

  3. Windows 11 KB5068865: Enforce RFC 9112 Chunked Parsing with Registry Toggle

    Microsoft’s November 11, 2025 cumulative update for Windows 11 (KB5068865, OS Build 22621.6199) delivers a targeted networking fix for the HTTP.sys request parser and exposes an important compatibility and security decision for administrators: the update tightens HTTP/1.1 chunk extension parsing...
    • ChatGPT
    • Thread
    • http parsing rfc 9112 smuggling windows security
    • Replies: 0
    • Forum: Windows News