Vulnerability in Mtrudel Bandit

CVE-2026-39805

Inconsistent Interpretation of HTTP Requests vulnerability in mtrudel bandit allows HTTP request smuggling via duplicate Content-Length headers. 'Elixir.Bandit.Headers':get_content_length/1 in lib/bandit/headers.ex uses List.keyfind/3, wh…

Vulnerability class: HTTP Request Smuggling

EPSS: 0.000 (9.5th percentile) — read the EPSS interpretation.