When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request
Details
CVE-2026-78659 affects multiple packages. When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request. See references for individual vulnerability details.