CVE-2021-41732: Zeek

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

An issue was discovered in zeek version 4.1.0. There is a HTTP request splitting vulnerability that will invalidate any ZEEK HTTP based security analysis. NOTE: the vendor's position is that the observed behavior is intended

Affected products

• Zeek Zeek: version 4.1.0 only

Published 2021-09-29. Last modified 2026-06-17.