TI-2023-11366 CVE-2023-26142 · GHSA-3r2p-c9r5-pw6w
HTTP response splitting in Crow
Priority HIGH 68
All versions of the package crow are vulnerable to HTTP Response Splitting when untrusted user input is used to build header values.
Vulnerabilities
6 records
TI-2022-18200 CVE-2022-38667 · GHSA-g8qv-x989-399f
HTTP applications (servers) based on Crow through 1.0+4 may allow a Use-After-Free and…
Priority MEDIUM 48
HTTP applications (servers) based on Crow through 1.0+4 may allow a Use-After-Free and code execution when HTTP pipelining is used.
TI-2022-18201 CVE-2022-38668 · GHSA-5948-4f22-j6wp
HTTP applications (servers) based on Crow through 1.0+4 may reveal potentially sensitive…
Priority LOW 36
HTTP applications (servers) based on Crow through 1.0+4 may reveal potentially sensitive uninitialized data from stack memory when fulfilling a request for a static file smaller than 16 KB.
TI-2022-15735 CVE-2022-34970 · GHSA-h8v6-grj2-pfx5
Crow before 1.0+4 has a heap-based buffer overflow via the function qs_parse in…
Priority MEDIUM 49
Crow before 1.0+4 has a heap-based buffer overflow via the function qs_parse in query_string.h.
TI-2021-06197 CVE-2021-23824 · GHSA-phvc-ghwf-mr3q
Content Injection
Priority LOW 31
This affects the package Crow before 0.3+4.
TI-2021-06154 CVE-2021-23514 · GHSA-m754-q244-3crw
Path traversal in Crow
Priority LOW 36
This affects the package Crow before 0.3+4.