Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, a negative Content-Length value was converted to unsigned, treating it as an impossibly large length instead. In theory, this bug could enable HTTP request/response smuggling. This vulnerability is fixed in 1.4.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-32239 Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, a negative Content-Length value was converted to unsigned, treating it as an… https://www.cve.org/CVERecord?id=CVE-2026-32239
Post summary
A Cap'n Proto vulnerability (CVE-2026-32239) was disclosed, detailing a negative Content‑Length conversion issue, with no PoC, exploit, or patch information provided.
CVE-2026-32239 HTTP Request/Response Smuggling Vulnerability in Cap'n Proto Before 1.4.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-32239
Post summary
The post announces CVE-2026-32239, describing an HTTP request/response smuggling flaw in Cap'n Proto versions prior to 1.4.0, with further details available at the provided VulMon link.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | capnproto | capnproto | - | - | - |