HTTP header injection in the httpd package in fli4l prior to 3.10.1 and 4.0 prior to 2015-01-30.
fli4l fli4l 4.0
fli4l fli4l