Please be advised that SA-2022-008 has been published.
Summary:
The vulnerability is a stack overflow in the HTTP Header parsing code in the webserver. The stack overflow condition can lead to a potential remote code execution (RCE).
Please see the full Security Advisory announcement for more details: Security Advisory -
SA-2022-008 - HTTP Header Stack Overflow (CVE-2022-29861)