Patch Gunicorn to Version 22.0 to Prevent HTTP Request Smuggling Vulnerability
Which version(s) are affected?
Hey fellow readers, if you're deploying your python application or containerized application through Gunicorn (Green Unicorn) there is a new vulnerability that bypasses validation when multiple conflicting Transfer-Encoding headers are used which are treated as chunked data regardless of final encoding leading to Request Smuggling allowing access to restricted API endpoints in your application without needed credentials/tokens.