Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: tiny-http Clear all filters
TI-2026-47401 CVE-2026-66753 · GHSA-5wm6-g4fr-88x8

tiny-http 0.12.0 HTTP Response Splitting via Header Injection

Priority MEDIUM 61

tiny-http through 0.12.0 contains an HTTP header injection vulnerability that allows attackers to inject carriage return (0x0D) and line feed (0x0A) bytes into HTTP header values on both request and response sides due to…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00301 Published 2026-07-28 No fix listed CWE-113
TI-2026-47400 CVE-2026-66752 · GHSA-5hc2-r3jq-vc45

tiny-http 0.12.0 HTTP Request Smuggling via Transfer-Encoding Handling

Priority MEDIUM 61

tiny-http through 0.12.0 contains an HTTP request smuggling vulnerability that allows remote attackers to desynchronize request framing by sending a Transfer-Encoding header with any value, including non-chunked codings,…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00329 Published 2026-07-28 No fix listed CWE-444