Severity: Critical
CVSS Score: 9.1
Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711.