Servers and applications

CVE-2021-37148

Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.0.1.

Severity: High 7.5
Published: 3 Nov 2021
Last changed: 17 Jun 2026
Added to UpHeron: 1 Nov 2026
Sources: NVD

Affected software

Software	Affected versions
Apache Traffic ServerServers and applications · `cpe:a:apache:traffic_server`	From 8.0.0 up to 8.1.2 From 9.0.0 up to 9.0.1

References

NVD https://nvd.nist.gov/vuln/detail/CVE-2021-37148
CVE.org https://www.cve.org/CVERecord?id=CVE-2021-37148