2017-04-17.yml

---
id: dc96aba4-4462-4d3b-b73f-28b9349133d8
package: plug
disclosure_date: 2017-04-17
cve: 2018-1000883
link: https://github.com/elixir-plug/plug/commit/8857f8ab4acf9b9c22e80480dae2636692f5f573
title: |
  Header Injection

description: |
  Cookie headers were not validated

patched_versions:
  - ">= 1.3.5"
  - ~> 1.2.5
  - ~> 1.1.9
  - ~> 1.0.6