Read the docs

tiny-http

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

tiny-http records in CISA KEV

No tiny-http vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-47401 CVE-2026-66753 · GHSA-5wm6-g4fr-88x8

tiny-http 0.12.0 HTTP Response Splitting via Header Injection

Priority MEDIUM 61

tiny-http through 0.12.0 contains an HTTP header injection vulnerability that allows attackers to inject carriage return (0x0D) and line feed (0x0A) bytes into HTTP header values on both request and response sides due to…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00301 Published 2026-07-28 No fix listed CWE-113
TI-2026-47400 CVE-2026-66752 · GHSA-5hc2-r3jq-vc45

tiny-http 0.12.0 HTTP Request Smuggling via Transfer-Encoding Handling

Priority MEDIUM 61

tiny-http through 0.12.0 contains an HTTP request smuggling vulnerability that allows remote attackers to desynchronize request framing by sending a Transfer-Encoding header with any value, including non-chunked codings,…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00329 Published 2026-07-28 No fix listed CWE-444
Open these records in search →