protocol-http1
A low level implementation of the HTTP/1 protocol.
View on Github
Activity
- Latest release
- 3w ago
- Total releases
- 66
- Cadence
- ~15 days
- Last 12 months
- 10
Reach
- Downloads
- 15.9M
- Stars
- 7
Details
- License
- MIT
- First release
- May 08, 2019
| Version | Released | |
|---|---|---|
0.41.0
minor
| ||
0.40.2
patch
| ||
0.40.1
patch
| ||
0.40.0
minor
| ||
0.39.0
minor
| ||
0.38.0
minor
| ||
0.37.1
patch
| ||
0.37.0
minor
| ||
0.36.0
minor
| ||
0.35.2
patch
| ||
0.35.1
patch
| ||
0.35.0
minor
| ||
0.34.1
patch
| ||
0.33.0
minor
| ||
0.32.0
minor
| ||
0.34.0
minor
| ||
0.31.0
minor
| ||
0.30.0
minor
| ||
0.29.0
minor
| ||
0.28.0
minor
| ||
0.28.1
patch
| ||
0.27.0
minor
| ||
0.26.0
minor
| ||
0.25.0
minor
| ||
0.24.0
minor
| ||
0.23.0
minor
| ||
0.22.0
minor
| ||
0.21.0
minor
| ||
0.20.0
minor
| ||
0.19.1
patch
| ||
0.19.0
minor
| ||
0.18.0
minor
| ||
0.17.0
minor
| ||
0.16.1
patch
| ||
0.16.0
minor
| ||
0.15.1
patch
| ||
0.15.0
minor
1 CVE
CVE-2023-38697
GHSA-6jwc-qr2q-7xwj
Aug 03, 2023
protocol-http1 HTTP Request/Response Smuggling vulnerability
5.8
/ 10
Medium
Network
Low
None
None
Changed
None
Low
None
ImpactRFC 9112 Section 7.1 defined the format of chunk size, chunk data and chunk extension (detailed ABNF is in Appendix section). In summary:
However, we found that Falcon has following behaviors while disobey the corresponding RFCs.
This behavior can lead to desync when forwarding through multiple HTTP parsers, potentially results in HTTP request smuggling and firewall bypassing. Note that while these issues were reproduced in Falcon (the server), the issue is with PatchesFixed in WorkaroundsNone. Referenceshttps://github.com/socketry/protocol-http1/pull/20 Affected versions
0.1.0
0.10.0
0.10.1
0.10.2
0.10.3
0.11.0
0.11.1
0.12.0
0.13.0
0.13.1
0.13.2
0.14.0
+ 18 more Show less
0.14.1
0.14.2
0.14.3
0.14.4
0.14.6
0.15.0
0.2.0
0.3.0
0.4.0
0.4.1
0.5.0
0.6.0
0.7.0
0.8.0
0.8.1
0.8.2
0.8.3
0.9.0
Fixed in
0.15.1
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
0.14.6
patch
1 CVE
CVE-2023-38697
GHSA-6jwc-qr2q-7xwj
Aug 03, 2023
protocol-http1 HTTP Request/Response Smuggling vulnerability
5.8
/ 10
Medium
Network
Low
None
None
Changed
None
Low
None
ImpactRFC 9112 Section 7.1 defined the format of chunk size, chunk data and chunk extension (detailed ABNF is in Appendix section). In summary:
However, we found that Falcon has following behaviors while disobey the corresponding RFCs.
This behavior can lead to desync when forwarding through multiple HTTP parsers, potentially results in HTTP request smuggling and firewall bypassing. Note that while these issues were reproduced in Falcon (the server), the issue is with PatchesFixed in WorkaroundsNone. Referenceshttps://github.com/socketry/protocol-http1/pull/20 Affected versions
0.1.0
0.10.0
0.10.1
0.10.2
0.10.3
0.11.0
0.11.1
0.12.0
0.13.0
0.13.1
0.13.2
0.14.0
+ 18 more Show less
0.14.1
0.14.2
0.14.3
0.14.4
0.14.6
0.15.0
0.2.0
0.3.0
0.4.0
0.4.1
0.5.0
0.6.0
0.7.0
0.8.0
0.8.1
0.8.2
0.8.3
0.9.0
Fixed in
0.15.1
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
0.14.3
patch
1 CVE
CVE-2023-38697
GHSA-6jwc-qr2q-7xwj
Aug 03, 2023
protocol-http1 HTTP Request/Response Smuggling vulnerability
5.8
/ 10
Medium
Network
Low
None
None
Changed
None
Low
None
ImpactRFC 9112 Section 7.1 defined the format of chunk size, chunk data and chunk extension (detailed ABNF is in Appendix section). In summary:
However, we found that Falcon has following behaviors while disobey the corresponding RFCs.
This behavior can lead to desync when forwarding through multiple HTTP parsers, potentially results in HTTP request smuggling and firewall bypassing. Note that while these issues were reproduced in Falcon (the server), the issue is with PatchesFixed in WorkaroundsNone. Referenceshttps://github.com/socketry/protocol-http1/pull/20 Affected versions
0.1.0
0.10.0
0.10.1
0.10.2
0.10.3
0.11.0
0.11.1
0.12.0
0.13.0
0.13.1
0.13.2
0.14.0
+ 18 more Show less
0.14.1
0.14.2
0.14.3
0.14.4
0.14.6
0.15.0
0.2.0
0.3.0
0.4.0
0.4.1
0.5.0
0.6.0
0.7.0
0.8.0
0.8.1
0.8.2
0.8.3
0.9.0
Fixed in
0.15.1
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
0.14.4
patch
1 CVE
CVE-2023-38697
GHSA-6jwc-qr2q-7xwj
Aug 03, 2023
protocol-http1 HTTP Request/Response Smuggling vulnerability
5.8
/ 10
Medium
Network
Low
None
None
Changed
None
Low
None
ImpactRFC 9112 Section 7.1 defined the format of chunk size, chunk data and chunk extension (detailed ABNF is in Appendix section). In summary:
However, we found that Falcon has following behaviors while disobey the corresponding RFCs.
This behavior can lead to desync when forwarding through multiple HTTP parsers, potentially results in HTTP request smuggling and firewall bypassing. Note that while these issues were reproduced in Falcon (the server), the issue is with PatchesFixed in WorkaroundsNone. Referenceshttps://github.com/socketry/protocol-http1/pull/20 Affected versions
0.1.0
0.10.0
0.10.1
0.10.2
0.10.3
0.11.0
0.11.1
0.12.0
0.13.0
0.13.1
0.13.2
0.14.0
+ 18 more Show less
0.14.1
0.14.2
0.14.3
0.14.4
0.14.6
0.15.0
0.2.0
0.3.0
0.4.0
0.4.1
0.5.0
0.6.0
0.7.0
0.8.0
0.8.1
0.8.2
0.8.3
0.9.0
Fixed in
0.15.1
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
0.14.2
patch
1 CVE
CVE-2023-38697
GHSA-6jwc-qr2q-7xwj
Aug 03, 2023
protocol-http1 HTTP Request/Response Smuggling vulnerability
5.8
/ 10
Medium
Network
Low
None
None
Changed
None
Low
None
ImpactRFC 9112 Section 7.1 defined the format of chunk size, chunk data and chunk extension (detailed ABNF is in Appendix section). In summary:
However, we found that Falcon has following behaviors while disobey the corresponding RFCs.
This behavior can lead to desync when forwarding through multiple HTTP parsers, potentially results in HTTP request smuggling and firewall bypassing. Note that while these issues were reproduced in Falcon (the server), the issue is with PatchesFixed in WorkaroundsNone. Referenceshttps://github.com/socketry/protocol-http1/pull/20 Affected versions
0.1.0
0.10.0
0.10.1
0.10.2
0.10.3
0.11.0
0.11.1
0.12.0
0.13.0
0.13.1
0.13.2
0.14.0
+ 18 more Show less
0.14.1
0.14.2
0.14.3
0.14.4
0.14.6
0.15.0
0.2.0
0.3.0
0.4.0
0.4.1
0.5.0
0.6.0
0.7.0
0.8.0
0.8.1
0.8.2
0.8.3
0.9.0
Fixed in
0.15.1
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
0.14.1
patch
1 CVE
CVE-2023-38697
GHSA-6jwc-qr2q-7xwj
Aug 03, 2023
protocol-http1 HTTP Request/Response Smuggling vulnerability
5.8
/ 10
Medium
Network
Low
None
None
Changed
None
Low
None
ImpactRFC 9112 Section 7.1 defined the format of chunk size, chunk data and chunk extension (detailed ABNF is in Appendix section). In summary:
However, we found that Falcon has following behaviors while disobey the corresponding RFCs.
This behavior can lead to desync when forwarding through multiple HTTP parsers, potentially results in HTTP request smuggling and firewall bypassing. Note that while these issues were reproduced in Falcon (the server), the issue is with PatchesFixed in WorkaroundsNone. Referenceshttps://github.com/socketry/protocol-http1/pull/20 Affected versions
0.1.0
0.10.0
0.10.1
0.10.2
0.10.3
0.11.0
0.11.1
0.12.0
0.13.0
0.13.1
0.13.2
0.14.0
+ 18 more Show less
0.14.1
0.14.2
0.14.3
0.14.4
0.14.6
0.15.0
0.2.0
0.3.0
0.4.0
0.4.1
0.5.0
0.6.0
0.7.0
0.8.0
0.8.1
0.8.2
0.8.3
0.9.0
Fixed in
0.15.1
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
0.14.0
minor
1 CVE
CVE-2023-38697
GHSA-6jwc-qr2q-7xwj
Aug 03, 2023
protocol-http1 HTTP Request/Response Smuggling vulnerability
5.8
/ 10
Medium
Network
Low
None
None
Changed
None
Low
None
ImpactRFC 9112 Section 7.1 defined the format of chunk size, chunk data and chunk extension (detailed ABNF is in Appendix section). In summary:
However, we found that Falcon has following behaviors while disobey the corresponding RFCs.
This behavior can lead to desync when forwarding through multiple HTTP parsers, potentially results in HTTP request smuggling and firewall bypassing. Note that while these issues were reproduced in Falcon (the server), the issue is with PatchesFixed in WorkaroundsNone. Referenceshttps://github.com/socketry/protocol-http1/pull/20 Affected versions
0.1.0
0.10.0
0.10.1
0.10.2
0.10.3
0.11.0
0.11.1
0.12.0
0.13.0
0.13.1
0.13.2
0.14.0
+ 18 more Show less
0.14.1
0.14.2
0.14.3
0.14.4
0.14.6
0.15.0
0.2.0
0.3.0
0.4.0
0.4.1
0.5.0
0.6.0
0.7.0
0.8.0
0.8.1
0.8.2
0.8.3
0.9.0
Fixed in
0.15.1
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
0.13.2
patch
1 CVE
CVE-2023-38697
GHSA-6jwc-qr2q-7xwj
Aug 03, 2023
protocol-http1 HTTP Request/Response Smuggling vulnerability
5.8
/ 10
Medium
Network
Low
None
None
Changed
None
Low
None
ImpactRFC 9112 Section 7.1 defined the format of chunk size, chunk data and chunk extension (detailed ABNF is in Appendix section). In summary:
However, we found that Falcon has following behaviors while disobey the corresponding RFCs.
This behavior can lead to desync when forwarding through multiple HTTP parsers, potentially results in HTTP request smuggling and firewall bypassing. Note that while these issues were reproduced in Falcon (the server), the issue is with PatchesFixed in WorkaroundsNone. Referenceshttps://github.com/socketry/protocol-http1/pull/20 Affected versions
0.1.0
0.10.0
0.10.1
0.10.2
0.10.3
0.11.0
0.11.1
0.12.0
0.13.0
0.13.1
0.13.2
0.14.0
+ 18 more Show less
0.14.1
0.14.2
0.14.3
0.14.4
0.14.6
0.15.0
0.2.0
0.3.0
0.4.0
0.4.1
0.5.0
0.6.0
0.7.0
0.8.0
0.8.1
0.8.2
0.8.3
0.9.0
Fixed in
0.15.1
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
0.13.1
patch
1 CVE
CVE-2023-38697
GHSA-6jwc-qr2q-7xwj
Aug 03, 2023
protocol-http1 HTTP Request/Response Smuggling vulnerability
5.8
/ 10
Medium
Network
Low
None
None
Changed
None
Low
None
ImpactRFC 9112 Section 7.1 defined the format of chunk size, chunk data and chunk extension (detailed ABNF is in Appendix section). In summary:
However, we found that Falcon has following behaviors while disobey the corresponding RFCs.
This behavior can lead to desync when forwarding through multiple HTTP parsers, potentially results in HTTP request smuggling and firewall bypassing. Note that while these issues were reproduced in Falcon (the server), the issue is with PatchesFixed in WorkaroundsNone. Referenceshttps://github.com/socketry/protocol-http1/pull/20 Affected versions
0.1.0
0.10.0
0.10.1
0.10.2
0.10.3
0.11.0
0.11.1
0.12.0
0.13.0
0.13.1
0.13.2
0.14.0
+ 18 more Show less
0.14.1
0.14.2
0.14.3
0.14.4
0.14.6
0.15.0
0.2.0
0.3.0
0.4.0
0.4.1
0.5.0
0.6.0
0.7.0
0.8.0
0.8.1
0.8.2
0.8.3
0.9.0
Fixed in
0.15.1
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
0.13.0
minor
1 CVE
CVE-2023-38697
GHSA-6jwc-qr2q-7xwj
Aug 03, 2023
protocol-http1 HTTP Request/Response Smuggling vulnerability
5.8
/ 10
Medium
Network
Low
None
None
Changed
None
Low
None
ImpactRFC 9112 Section 7.1 defined the format of chunk size, chunk data and chunk extension (detailed ABNF is in Appendix section). In summary:
However, we found that Falcon has following behaviors while disobey the corresponding RFCs.
This behavior can lead to desync when forwarding through multiple HTTP parsers, potentially results in HTTP request smuggling and firewall bypassing. Note that while these issues were reproduced in Falcon (the server), the issue is with PatchesFixed in WorkaroundsNone. Referenceshttps://github.com/socketry/protocol-http1/pull/20 Affected versions
0.1.0
0.10.0
0.10.1
0.10.2
0.10.3
0.11.0
0.11.1
0.12.0
0.13.0
0.13.1
0.13.2
0.14.0
+ 18 more Show less
0.14.1
0.14.2
0.14.3
0.14.4
0.14.6
0.15.0
0.2.0
0.3.0
0.4.0
0.4.1
0.5.0
0.6.0
0.7.0
0.8.0
0.8.1
0.8.2
0.8.3
0.9.0
Fixed in
0.15.1
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
0.12.0
minor
1 CVE
CVE-2023-38697
GHSA-6jwc-qr2q-7xwj
Aug 03, 2023
protocol-http1 HTTP Request/Response Smuggling vulnerability
5.8
/ 10
Medium
Network
Low
None
None
Changed
None
Low
None
ImpactRFC 9112 Section 7.1 defined the format of chunk size, chunk data and chunk extension (detailed ABNF is in Appendix section). In summary:
However, we found that Falcon has following behaviors while disobey the corresponding RFCs.
This behavior can lead to desync when forwarding through multiple HTTP parsers, potentially results in HTTP request smuggling and firewall bypassing. Note that while these issues were reproduced in Falcon (the server), the issue is with PatchesFixed in WorkaroundsNone. Referenceshttps://github.com/socketry/protocol-http1/pull/20 Affected versions
0.1.0
0.10.0
0.10.1
0.10.2
0.10.3
0.11.0
0.11.1
0.12.0
0.13.0
0.13.1
0.13.2
0.14.0
+ 18 more Show less
0.14.1
0.14.2
0.14.3
0.14.4
0.14.6
0.15.0
0.2.0
0.3.0
0.4.0
0.4.1
0.5.0
0.6.0
0.7.0
0.8.0
0.8.1
0.8.2
0.8.3
0.9.0
Fixed in
0.15.1
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
0.11.1
patch
1 CVE
CVE-2023-38697
GHSA-6jwc-qr2q-7xwj
Aug 03, 2023
protocol-http1 HTTP Request/Response Smuggling vulnerability
5.8
/ 10
Medium
Network
Low
None
None
Changed
None
Low
None
ImpactRFC 9112 Section 7.1 defined the format of chunk size, chunk data and chunk extension (detailed ABNF is in Appendix section). In summary:
However, we found that Falcon has following behaviors while disobey the corresponding RFCs.
This behavior can lead to desync when forwarding through multiple HTTP parsers, potentially results in HTTP request smuggling and firewall bypassing. Note that while these issues were reproduced in Falcon (the server), the issue is with PatchesFixed in WorkaroundsNone. Referenceshttps://github.com/socketry/protocol-http1/pull/20 Affected versions
0.1.0
0.10.0
0.10.1
0.10.2
0.10.3
0.11.0
0.11.1
0.12.0
0.13.0
0.13.1
0.13.2
0.14.0
+ 18 more Show less
0.14.1
0.14.2
0.14.3
0.14.4
0.14.6
0.15.0
0.2.0
0.3.0
0.4.0
0.4.1
0.5.0
0.6.0
0.7.0
0.8.0
0.8.1
0.8.2
0.8.3
0.9.0
Fixed in
0.15.1
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
0.11.0
minor
1 CVE
CVE-2023-38697
GHSA-6jwc-qr2q-7xwj
Aug 03, 2023
protocol-http1 HTTP Request/Response Smuggling vulnerability
5.8
/ 10
Medium
Network
Low
None
None
Changed
None
Low
None
ImpactRFC 9112 Section 7.1 defined the format of chunk size, chunk data and chunk extension (detailed ABNF is in Appendix section). In summary:
However, we found that Falcon has following behaviors while disobey the corresponding RFCs.
This behavior can lead to desync when forwarding through multiple HTTP parsers, potentially results in HTTP request smuggling and firewall bypassing. Note that while these issues were reproduced in Falcon (the server), the issue is with PatchesFixed in WorkaroundsNone. Referenceshttps://github.com/socketry/protocol-http1/pull/20 Affected versions
0.1.0
0.10.0
0.10.1
0.10.2
0.10.3
0.11.0
0.11.1
0.12.0
0.13.0
0.13.1
0.13.2
0.14.0
+ 18 more Show less
0.14.1
0.14.2
0.14.3
0.14.4
0.14.6
0.15.0
0.2.0
0.3.0
0.4.0
0.4.1
0.5.0
0.6.0
0.7.0
0.8.0
0.8.1
0.8.2
0.8.3
0.9.0
Fixed in
0.15.1
References
Updated Sep 10, 2026 · Source: OSV.dev | ||
0.10.3
patch
1 CVE
CVE-2023-38697
GHSA-6jwc-qr2q-7xwj
Aug 03, 2023
protocol-http1 HTTP Request/Response Smuggling vulnerability
5.8
/ 10
Medium
Network
Low
None
None
Changed
None
Low
None
ImpactRFC 9112 Section 7.1 defined the format of chunk size, chunk data and chunk extension (detailed ABNF is in Appendix section). In summary:
However, we found that Falcon has following behaviors while disobey the corresponding RFCs.
This behavior can lead to desync when forwarding through multiple HTTP parsers, potentially results in HTTP request smuggling and firewall bypassing. Note that while these issues were reproduced in Falcon (the server), the issue is with PatchesFixed in WorkaroundsNone. Referenceshttps://github.com/socketry/protocol-http1/pull/20 Affected versions
0.1.0
0.10.0
0.10.1
0.10.2
0.10.3
0.11.0
0.11.1
0.12.0
0.13.0
0.13.1
0.13.2
0.14.0
+ 18 more Show less
0.14.1
0.14.2
0.14.3
0.14.4
0.14.6
0.15.0
0.2.0
0.3.0
0.4.0
0.4.1
0.5.0
0.6.0
0.7.0
0.8.0
0.8.1
0.8.2
0.8.3
0.9.0
Fixed in
0.15.1
References
Updated Sep 10, 2026 · Source: OSV.dev |