Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: ithewei Clear all filters
TI-2025-01612 CVE-2025-1867 · GHSA-4qqr-wvpj-rjf9

HTTP Response Smuggling Vulnerability in libhv

Priority MEDIUM 49

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in ithewei libhv allows HTTP Response Smuggling.This issue affects libhv: through 1.3.3.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00385 Published 2025-03-03 No fix listed CWE-444
TI-2023-11371 CVE-2023-26147 · GHSA-fh2j-2j24-wjwp

HTTP response splitting in ithewei/libhv

Priority HIGH 66

All versions of the package ithewei/libhv are vulnerable to HTTP Response Splitting when untrusted user input is used to build headers values.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0044 Published 2023-09-29 No fix listed CWE-113
TI-2023-11372 CVE-2023-26148 · GHSA-qfcm-r8pp-mrfm

Injection in ithewei/libhv

Priority MEDIUM 58

All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used to set request headers.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.0044 Published 2023-09-29 No fix listed CWE-93
TI-2023-11370 CVE-2023-26146 · GHSA-f4xh-jq5v-423g

Cross-site scripting in ithewei/libhv

Priority HIGH 66

All versions of the package ithewei/libhv are vulnerable to Cross-site Scripting (XSS) such that when a file with a name containing a malicious payload is served by the application, the filename is displayed without prop…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0044 Published 2023-09-29 No fix listed CWE-79