{"id":"CVE-2020-7670","details":"agoo prior to 2.14.0 allows request smuggling attacks where agoo is used as a backend and a frontend proxy also being vulnerable. HTTP pipelining issues and request smuggling attacks might be possible due to incorrect Content-Length and Transfer encoding header parsing. It is possible to conduct HTTP request smuggling attacks where `agoo` is used as part of a chain of backend servers due to insufficient `Content-Length` and `Transfer Encoding` parsing.","aliases":["SNYK-RUBY-AGOO-569137"],"modified":"2026-05-17T11:53:57.980043203Z","published":"2020-06-10T16:15:10.540Z","database_specific":{},"references":[{"type":"ADVISORY","url":"https://snyk.io/vuln/SNYK-RUBY-AGOO-569137"},{"type":"REPORT","url":"https://github.com/ohler55/agoo/issues/88"},{"type":"FIX","url":"https://github.com/ohler55/agoo/commit/23d03535cf7b50d679a60a953a0cae9519a4a130"}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}]}