This is the official haproxy notice on this: https://www.haproxy.com/blog/september-2021-duplicate-content-length-header-fixed/ https://www.haproxy.com/blog/se

This is the official haproxy notice on this: https://www.haproxy.com/blog/september-2021-duplicate-content-length-header-fixed/ https://www.haproxy.com/blog/september-2021-duplicate-conten... It can be mitigated without needing to upgrade. The post includes a simple mitigation by adding two rules to each front end that block request/responses trying to exploit this vulnerability.