CVE-2026-111816 - Apache Traffic Server: A malformed 302 response bypasses parse-error rejection through the Transfer-Encoding: chunked carve-out
CVE ID :CVE-2026-111816 Published : Oct. 21, 2026, 7:16 p.m. | 49 minutes ago Description :Apache Traffic Server forwarded a malformed 302 response that should have been rejected as a parse error, because the Transfer-Encoding: chunked carve-out bypassed the rejection path. A response that...