Author

Kenton Varda <kenton@cloudflare.com> 2026-03-12 09:58:09 -0500

Parents

fb5d59c

Tree

d8c09bf

Update capnproto with HTTP CVE fixes.

CVE-2026-32239 and CVE-2026-32240.

These could affect workerd if workerd is placed behind (or in front of) a proxy that exhibits certain bugs of its own, leading to request/response smuggling. We are not aware of any proxy which exhibits the necessary behavior. This does not affect Cloudflare's production environment.

More details in: https://github.com/capnproto/capnproto/blob/v2/security-advisories/2026-03-12-1-http-size-validation.md