JetBrains Ktor framework before version 1.2.6 was vulnerable to HTTP Response Splitting.
jetbrains ktor