4.0 MEDIUM
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): High (H)
- Privileges Required (PR): None (N)
- User Interaction (UI): None (N)
- Scope (S): Changed (C)
- Confidentiality (C): None (N)
- Integrity (I): Low (L)
- Availability (A): None (N)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): High (H)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): None (N)
- Modified Scope (MS): Changed (C)
- Modified Integrity (MI): Low (L)
- Modified Availability (MA): None (N)
by @ADMIN Activity log
- Created suggestion
- @ADMIN dismissed
Akamai Ghost on Akamai CDN edge servers before 2026-02-06 mishandles …
Akamai Ghost on Akamai CDN edge servers before 2026-02-06 mishandles processing of custom hop-by-hop HTTP headers, where an incoming request containing the header "Connection: Transfer-Encoding" could result in a forward request with invalid message framing, depending on the Akamai processing path. This could result in the origin server parsing the request body incorrectly, leading to HTTP request smuggling.
Affected products
- <2026-02-06
Matching in nixpkgs
pkgs.ghost
Android post-exploitation framework
-
nixos-unstable -
- nixos-unstable-small 8.0.0-unstable-2025-11-01
pkgs.ghostty
Fast, native, feature-rich terminal emulator pushing modern features
-
nixos-unstable -
- nixos-unstable-small 1.2.3
pkgs.ghost-cli
CLI Tool for installing & updating Ghost
-
nixos-unstable -
- nixos-unstable-small 1.28.4
pkgs.ghostfolio
Open Source Wealth Management Software
-
nixos-unstable -
- nixos-unstable-small 2.239.0
pkgs.ghostunnel
TLS proxy with mutual authentication support for securing non-TLS backend applications
-
nixos-unstable -
- nixos-unstable-small 1.8.4
pkgs.ghostscript
PostScript interpreter (mainline version)
-
nixos-unstable -
- nixos-unstable-small 10.06.0
pkgs.ghosttohugo
Convert Ghost export to Hugo posts
-
nixos-unstable -
- nixos-unstable-small 0.5.3
pkgs.ghostty-bin
Fast, native, feature-rich terminal emulator pushing modern features
-
nixos-unstable -
- nixos-unstable-small 1.2.3
pkgs.ghostscriptX
PostScript interpreter (mainline version)
-
nixos-unstable -
- nixos-unstable-small 10.06.0
pkgs.ghostscript_headless
PostScript interpreter (mainline version)
-
nixos-unstable -
- nixos-unstable-small 10.06.0
pkgs.libsForQt5.ghostwriter
None
pkgs.kdePackages.ghostwriter
Text editor for Markdown
-
nixos-unstable -
- nixos-unstable-small 25.12.2
pkgs.plasma5Packages.ghostwriter
None
pkgs.haskellPackages.ghost-buster
Existential type utilites
-
nixos-unstable -
- nixos-unstable-small 0.1.1.0
pkgs.python312Packages.ghostscript
None
pkgs.python313Packages.ghostscript
Interface to the Ghostscript C-API using ctypes
-
nixos-unstable -
- nixos-unstable-small 0.7
pkgs.python314Packages.ghostscript
Interface to the Ghostscript C-API using ctypes
-
nixos-unstable -
- nixos-unstable-small 0.7
pkgs.tests.texlive.dvipng.ghostscript
None
pkgs.haskellPackages.ghostscript-parallel
Let Ghostscript render pages in parallel
-
nixos-unstable -
- nixos-unstable-small 0.0.1
pkgs.tree-sitter-grammars.tree-sitter-ghostty
Tree-sitter grammar for ghostty
-
nixos-unstable -
- nixos-unstable-small 0-unstable-2025-11-27
pkgs.python313Packages.tree-sitter-grammars.tree-sitter-ghostty
Python bindings for tree-sitter-ghostty
-
nixos-unstable -
- nixos-unstable-small 0+unstable20251127
pkgs.python314Packages.tree-sitter-grammars.tree-sitter-ghostty
Python bindings for tree-sitter-ghostty
-
nixos-unstable -
- nixos-unstable-small 0+unstable20251127
Package maintainers
-
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
-
@cything cy <nix@cything.io>
-
@matthiasbeyer Matthias Beyer <mail@beyermatthias.de>
-
@tobim Tobias Mayer <nix@tobim.fastmail.fm>
-
@clerie clerie <nix@clerie.de>
-
@pluiedev Leah Amelia Chen <hi@pluie.me>
-
@jcollie Jeffrey C. Ollie <jeff@ocjtech.us>
-
@getchoo Seth Flynn <getchoo@tuta.io>
-
@roberth Robert Hensing <nixpkgs@roberthensing.nl>
-
@mjm Matt Moriarity <matt@mattmoriarity.com>
-
@nyanloutre Paul Trehiou <paul@nyanlout.re>
-
@bkchr Bastian Köcher <nixos@kchr.de>
-
@NickCao Nick Cao <nickcao@nichi.co>
-
@ttuegel Thomas Tuegel <ttuegel@mailbox.org>
-
@peterhoeg Peter Hoeg <peter@hoeg.com>
-
@LunNova Luna Nova <nixpkgs-maintainer@lunnova.dev>
-
@ilya-fedin Ilya Fedin <fedin-ilja2010@ya.ru>
-
@FRidh Frederik Rietdijk <fridh@fridh.nl>
-
@SuperSandro2000 Sandro Jäckel <sandro.jaeckel@gmail.com>
-
@K900 Ilya K. <me@0upti.me>
-
@flokli Florian Klink <flokli@flokli.de>
-
@Enzime Michael Hoang
-
@adfaure Adrien Faure <adfaure@pm.me>
-
@mightyiam Shahar "Dawn" Or <mightyiampresence@gmail.com>
-
@stepbrobd Yifei Sun <ysun@hey.com>
-
@A-jay98 Ali Jamadi <ali@jamadi.me>
-
@aciceri Andrea Ciceri <andrea.ciceri@autistici.org>