Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, when using Transfer-Encoding: chunked, if a chunk's size parsed to a value of 2^64 or larger, it would be truncated to a 64-bit integer. In theory, this bug could enable HTTP request/response smuggling. This vulnerability is fixed in 1.4.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-32240 Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, when using Transfer-Encoding: chunked, if a chunk's size parsed to a value o… https://www.cve.org/CVERecord?id=CVE-2026-32240
Post summary
The post announces CVE-2026-32240, noting a chunked-encoding parsing issue in Cap'n Proto prior to v1.4.0, but provides no exploit or mitigation details.
CVE-2026-32240 HTTP Request/Response Smuggling Vulnerability in Cap'n Proto Before 1.4.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-32240
Post summary
The text announces a new HTTP request/response smuggling vulnerability affecting Cap'n Proto versions prior to 1.4.0, without providing PoC, exploitation tools, or remediation details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | capnproto | capnproto | - | - | - |