Pitchfork HTTP Request/Response Splitting vulnerability
HTTP Response Header Injection in Pitchfork Versions < 0.11.0 when used in conjunction with Rack 3
HTTP Response Header Injection in Pitchfork Versions < 0.11.0 when used in conjunction with Rack 3