yhirose

Records25All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high15CVSS 7.0–8.9

Exploited now

yhirose records in CISA KEV

No yhirose vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cpp-httplib 20 records HIGH

Records

20 records in Cpp-httplib · all components

TI-2026-33163 CVE-2026-45372

cpp-httplib: HTTP header value percent-decoding in server-side `parse_header` enables CRLF injection

HIGH 82

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1CRITICAL 9.9 Network No auth No interaction EPSS 0.00295 Published 2026-05-29 Fixed in 0.44.0 CWE-444

TI-2026-18294 CVE-2026-22776

cpp-httplib vulnerable to a denial of service (DOS) using a zip bomb

HIGH 77

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00411 Published 2026-01-12 Fixed in 0.30.1 CWE-409

TI-2026-17313 CVE-2026-21428

cpp-httplib has CRLF injection in http headers

HIGH 73

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00404 Published 2026-01-01 Fixed in 0.30.0 CWE-93

TI-2026-33146 CVE-2026-45352

cpp-httplib DoS: Negative chunk-size in chunked Transfer-Encoding

HIGH 72

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00327 Published 2026-05-29 Fixed in 0.43.4 CWE-1285

TI-2026-22709 CVE-2026-28435

Uncontrolled resource consumption in yhirose cpp-httplib

HIGH 72

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00476 Published 2026-03-04 Fixed in 0.35.0 CWE-400

TI-2025-33556 CVE-2025-53629

cpp-httplib Unbounded Memory Allocation in Chunked/No-Length Requests Vulnerability

HIGH 72

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00594 Published 2025-07-10 Fixed in 0.23.0 CWE-770

TI-2025-32923 CVE-2025-52887

cpp-httplib has unlimited number of http header fields, which causes memory leak

HIGH 72

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0049 Published 2025-06-26 No fix listed CWE-400

TI-2026-34214 CVE-2026-46527

NULL pointer dereference in yhirose cpp-httplib

HIGH 71

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00327 Published 2026-05-29 Fixed in 0.44.0 CWE-476

TI-2026-26124 CVE-2026-33745

cpp-httplib Client Leaks Authentication Credentials to Untrusted Hosts on Cross-Origin HTTP Redirect

HIGH 68

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00266 Published 2026-03-27 Fixed in 0.39.0 CWE-200

TI-2025-33555 CVE-2025-53628

cpp-httplib does not limit the length of a line

HIGH 67

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00524 Published 2025-07-10 Fixed in 0.20.1 CWE-770

TI-2026-24422 CVE-2026-31870

cpp-httplib Affected by Remote Process Crash via Malformed Content-Length Response Header

HIGH 66

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00516 Published 2026-03-11 Fixed in 0.37.1 CWE-248

TI-2025-40987 CVE-2025-66577

cpp-httplib Untrusted HTTP Header Handling: X-Forwarded-For/X-Real-IP Trust

MEDIUM 63

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00294 Published 2025-12-05 Fixed in 0.27.0 CWE-117

TI-2026-23221 CVE-2026-29076

cpp-httplib: Stack Overflow Denial of Service (DoS) via std::regex in multipart filename parsing

MEDIUM 60

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00699 Published 2026-03-07 Fixed in 0.37.0 CWE-1333

TI-2025-40980 CVE-2025-66570

cpp-httplib Untrusted HTTP Header Handling: Internal Header Shadowing (REMOTE/LOCAL)

MEDIUM 49

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00348 Published 2025-12-05 Fixed in 0.27.0 CWE-290

TI-2026-25136 CVE-2026-32627

cpp-httplib has a Silent TLS Certificate Verification Bypass on HTTPS Redirect via Proxy

LOW 39

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.00186 Published 2026-03-13 Fixed in 0.37.2 CWE-295

TI-2020-09400 CVE-2020-11709 · GHSA-fxvr-q2f8-9vxv

cpp-httplib through 0.5.8 does not filter \r\n in parameters passed into the set_redirect…

LOW 36

cpp-httplib through 0.5.8 does not filter \r\n in parameters passed into the set_redirect and set_header functions, which creates possibilities for CRLF injection and HTTP response splitting in some specific contexts.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01684 Published 2020-04-12 No fix listed CWE-74

TI-2026-39688 CVE-2026-54919

cpp-httplib: TLS certificate chain verification bypassed for IP-literal hosts on Mbed TLS and wolfSSL backends

LOW 34

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00264 Published 2026-07-10 Fixed in 0.47.0 CWE-295

TI-2025-00697 CVE-2025-0825 · GHSA-65rj-829h-6g8x

CRLF injection in Cpp-httplib

LOW 31

cpp-httplib version v0.17.3 through v0.18.3 fails to filter CRLF characters ("\r\n") when those are prefixed with a null byte.

CVSS 4.0MEDIUM 6.9 Network No auth User interaction EPSS 0.00409 Published 2025-02-04 No fix listed CWE-113

TI-2026-22708 CVE-2026-28434

cpp-httplib's default exception handler leaks e.what() to clients via EXCEPTION_WHAT response header

LOW 30

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00349 Published 2026-03-04 Fixed in 0.35.0 CWE-200

TI-2026-26706 CVE-2026-34441

cpp-httplib: HTTP Request Smuggling via Unconsumed GET Request Body

LOW 28

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00203 Published 2026-03-31 Fixed in 0.40.0 CWE-444

Open these records in search →

Critical	2
High	15
Medium	7
Low	1
No CVSS	0