{"action":"Upgrade meinheld to 1.0.2 or later.","affected":[{"fixed":"1.0.2","introduced":"0"}],"component":"meinheld","cve_ids":["CVE-2020-7658"],"ecosystem":"PyPI","epss":0.00686,"exploited":false,"fixed_versions":["1.0.2"],"ghsa_id":"GHSA-63h2-9cc8-fc7m","id":"tcs_01M5KG9ZE0JEB48RGVD30PB10D","modified_at":"2026-06-10T17:02:08.894050029Z","published_at":"2020-05-22T16:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-239","https://github.com/mopemope/meinheld/blob/master/CHANGES.rst,","https://snyk.io/vuln/SNYK-PYTHON-MEINHELD-569140","https://github.com/advisories/GHSA-63h2-9cc8-fc7m"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-239","url":"https://osv.dev/vulnerability/PYSEC-2020-239"}],"summary":"meinheld prior to 1.0.2 is vulnerable to HTTP Request Smuggling. HTTP pipelining issues and request smuggling attacks might be possible due to incorrect Content-Length and Transfer encoding header par"}