{"action":"Upgrade io.ktor:ktor-server-cio to 1.3.0 or later.","affected":[{"fixed":"1.3.0","introduced":"0"}],"component":"io.ktor:ktor-server-cio","cve_ids":["CVE-2020-5207"],"ecosystem":"Maven","epss":0.00762,"exploited":false,"fixed_versions":["1.3.0"],"ghsa_id":"GHSA-xrr9-rh8p-433v","id":"tcs_01M5N9JY76E21C977RPSTR2715","modified_at":"2026-07-08T05:59:54.373628390Z","published_at":"2020-01-27T19:28:40Z","references":["https://osv.dev/vulnerability/GHSA-xrr9-rh8p-433v","https://github.com/ktorio/ktor/security/advisories/GHSA-xrr9-rh8p-433v","https://nvd.nist.gov/vuln/detail/CVE-2020-5207","https://github.com/ktorio/ktor/pull/1547"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-xrr9-rh8p-433v#Maven/io.ktor:ktor-server-cio","url":"https://osv.dev/vulnerability/GHSA-xrr9-rh8p-433v"}],"summary":"Request smuggling is possible when both chunked TE and content length specified"}