Parser creates invalid uninitialized value

Lenient hyper header parsing of Content-Length could allow request smuggling

Integer overflow in hyper's parsing of the Transfer-Encoding header leads to data loss

Multiple Transfer-Encoding headers misinterprets request payload

Flaw in hyper allows request smuggling by sending a body in GET requests

HTTPS MitM vulnerability due to lack of hostname verification

headers containing newline characters can split messages