TI-2025-05964 CVE-2025-6566 · GHSA-7c5x-vxj3-93v9
oatpp Oat++ Deserializer.cpp deserializeArray stack-based overflow
Priority HIGH 70
A vulnerability was found in oatpp Oat++ up to 1.3.1.
oatpp
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
oatpp records in CISA KEVNo oatpp vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records
TI-2025-05915 CVE-2025-6515 · GHSA-rvw9-mm8q-456q
Reuse of session IDs in oatpp-mcp leads to session hijacking and prompt hijacking by remote attackers
Priority LOW 32
The MCP SSE endpoint in oatpp-mcp returns an instance pointer as the session ID, which is not unique nor cryptographically secure.