Skip to content
Heist/ feed
Back to feed
UnratedFix available

fasthttp v1.71.0

Type: patchSources: fasthttp

fasthttp v1.71.0 includes changes to prevent CRLF injection in header, redirect Location, and cookie setters, along with stricter HTTP input handling.

Products
fasthttp
Affected versions
Not specified
Fixed versions
v1.71.0
CVEs
Not specified
Confirmed fixed CVEs
Not specified
Updated in this feed
30 Oct 2026, 17:19 UTC · Revision 1

Source evidence

fasthttp v1.71.0

github-valyala-fasthttp · Original source

Published 5 May 2026, 02:52 UTC

fasthttp v1.71.0 includes changes to prevent CRLF injection in header, redirect Location, and cookie setters, along with stricter HTTP input handling.

Sanitize first-line header setters to prevent CRLF injection

fasthttp

Fixed versions: v1.71.0

Complete source record
{
  "id": "c3d735ee4ea98012e55745d293b89619659bce7dc6117af3df46188bca0e8901",
  "url": "https://github.com/valyala/fasthttp/releases/tag/v1.71.0",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "fasthttp v1.71.0",
    "summary": "fasthttp v1.71.0 includes changes to prevent CRLF injection in header, redirect Location, and cookie setters, along with stricter HTTP input handling.",
    "evidence": "Sanitize first-line header setters to prevent CRLF injection",
    "products": [
      {
        "name": {
          "value": "fasthttp",
          "evidence": "Release notes from fasthttp"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "v1.71.0",
            "evidence": "v1.71.0"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "github-valyala-fasthttp",
  "document_id": 22836,
  "published_at": "2026-05-05T02:52:00+00:00"
}