TI-2026-39688 CVE-2026-54919
cpp-httplib: TLS certificate chain verification bypassed for IP-literal hosts on Mbed TLS and wolfSSL backends
Priority LOW 34
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.
Vulnerabilities
20 records
TI-2026-33163 CVE-2026-45372
cpp-httplib: HTTP header value percent-decoding in server-side `parse_header` enables CRLF injection
Priority HIGH 82
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.
TI-2026-34214 CVE-2026-46527
NULL pointer dereference in yhirose cpp-httplib
Priority HIGH 71
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.
Priority HIGH 72
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.
Priority LOW 28
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.
TI-2026-26124 CVE-2026-33745
cpp-httplib Client Leaks Authentication Credentials to Untrusted Hosts on Cross-Origin HTTP Redirect
Priority HIGH 68
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.
TI-2026-25136 CVE-2026-32627
cpp-httplib has a Silent TLS Certificate Verification Bypass on HTTPS Redirect via Proxy
Priority LOW 39
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.
TI-2026-24422 CVE-2026-31870
cpp-httplib Affected by Remote Process Crash via Malformed Content-Length Response Header
Priority HIGH 66
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.
TI-2026-23221 CVE-2026-29076
cpp-httplib: Stack Overflow Denial of Service (DoS) via std::regex in multipart filename parsing
Priority MEDIUM 60
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.
Priority HIGH 72
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.
TI-2026-22708 CVE-2026-28434
cpp-httplib's default exception handler leaks e.what() to clients via EXCEPTION_WHAT response header
Priority LOW 30
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.
Priority HIGH 77
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.
TI-2026-17313 CVE-2026-21428
cpp-httplib has CRLF injection in http headers
Priority HIGH 73
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.
TI-2025-40987 CVE-2025-66577
cpp-httplib Untrusted HTTP Header Handling: X-Forwarded-For/X-Real-IP Trust
Priority MEDIUM 63
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.
TI-2025-40980 CVE-2025-66570
cpp-httplib Untrusted HTTP Header Handling: Internal Header Shadowing (REMOTE*/LOCAL*)
Priority MEDIUM 49
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.
TI-2025-33556 CVE-2025-53629
cpp-httplib Unbounded Memory Allocation in Chunked/No-Length Requests Vulnerability
Priority HIGH 72
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.
TI-2025-33555 CVE-2025-53628
cpp-httplib does not limit the length of a line
Priority HIGH 67
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.
TI-2025-32923 CVE-2025-52887
cpp-httplib has unlimited number of http header fields, which causes memory leak
Priority HIGH 72
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.
TI-2025-00697 CVE-2025-0825 · GHSA-65rj-829h-6g8x
CRLF injection in Cpp-httplib
Priority LOW 31
cpp-httplib version v0.17.3 through v0.18.3 fails to filter CRLF characters ("\r\n") when those are prefixed with a null byte.
TI-2020-09400 CVE-2020-11709 · GHSA-fxvr-q2f8-9vxv
cpp-httplib through 0.5.8 does not filter \r\n in parameters passed into the set_redirect…
Priority LOW 36
cpp-httplib through 0.5.8 does not filter \r\n in parameters passed into the set_redirect and set_header functions, which creates possibilities for CRLF injection and HTTP response splitting in some specific contexts.