Apsis Pound before 2.8a allows request smuggling via crafted headers, a different vulnerability than CVE-2005-3751.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-10711.json"