Timeline

• Jul 7, 2025 CVE Published
• Jul 7, 2025 PoC Published

References

• curl mishandles `%0c%0b` sequences in HTTP responses leading to CRLF confusions, Headers and Cookies Injection advisory