Vulnerabilities

Filters

1 selected

25 records

Sort

Vendor: yhirose Clear all filters

TI-2026-74410 CVE-2026-103930

CRLF injection in cpp-httplib open_stream alters HTTP request lines

LOW 18

cpp-httplib is a C++ header-only HTTP/HTTPS library.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00366 Published 2026-10-14 Fixed in 0.51.0 CWE-113

TI-2026-74409 CVE-2026-102944

cpp-httplib leaks Cookie headers on cross-origin redirect

HIGH 72

cpp-httplib is a C++ header-only HTTP/HTTPS library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00434 Published 2026-10-14 Fixed in 0.51.0 CWE-522

TI-2026-53978 CVE-2026-77358

cpp-httplib: Use-after-free of TLS session in WebSocketClient::shutdown_and_close()

HIGH 77

cpp-httplib is a C++ header-only HTTP/HTTPS library.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00445 Published 2026-08-27 Fixed in 0.50. CWE-416

TI-2026-53971 CVE-2026-77341

cpp-httplib: CRLF injection via unvalidated HTTP trailer headers in chunked response writing

MEDIUM 57

cpp-httplib is a C++ header-only HTTP/HTTPS library.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00461 Published 2026-08-27 Fixed in 0.50.0 CWE-113

TI-2026-39688 CVE-2026-54919

cpp-httplib: TLS certificate chain verification bypassed for IP-literal hosts on Mbed TLS and wolfSSL backends

LOW 34

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00264 Published 2026-07-10 Fixed in 0.47.0 CWE-295

TI-2026-33163 CVE-2026-45372

cpp-httplib: HTTP header value percent-decoding in server-side `parse_header` enables CRLF injection

HIGH 82

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1CRITICAL 9.9 Network No auth No interaction EPSS 0.00295 Published 2026-05-29 Fixed in 0.44.0 CWE-444

TI-2026-34214 CVE-2026-46527

NULL pointer dereference in yhirose cpp-httplib

HIGH 71

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00327 Published 2026-05-29 Fixed in 0.44.0 CWE-476

TI-2026-33146 CVE-2026-45352

cpp-httplib DoS: Negative chunk-size in chunked Transfer-Encoding

HIGH 72

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00327 Published 2026-05-29 Fixed in 0.43.4 CWE-1285

TI-2026-26706 CVE-2026-34441

cpp-httplib: HTTP Request Smuggling via Unconsumed GET Request Body

LOW 28

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00203 Published 2026-03-31 Fixed in 0.40.0 CWE-444

TI-2026-26124 CVE-2026-33745

cpp-httplib Client Leaks Authentication Credentials to Untrusted Hosts on Cross-Origin HTTP Redirect

HIGH 68

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00266 Published 2026-03-27 Fixed in 0.39.0 CWE-200

TI-2026-25136 CVE-2026-32627

cpp-httplib has a Silent TLS Certificate Verification Bypass on HTTPS Redirect via Proxy

LOW 39

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.002 Published 2026-03-13 Fixed in 0.37.2 CWE-295

TI-2026-24422 CVE-2026-31870

cpp-httplib Affected by Remote Process Crash via Malformed Content-Length Response Header

HIGH 66

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00516 Published 2026-03-11 Fixed in 0.37.1 CWE-248

TI-2026-23221 CVE-2026-29076

cpp-httplib: Stack Overflow Denial of Service (DoS) via std::regex in multipart filename parsing

MEDIUM 60

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00699 Published 2026-03-07 Fixed in 0.37.0 CWE-1333

TI-2026-22709 CVE-2026-28435

Uncontrolled resource consumption in yhirose cpp-httplib

HIGH 72

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00476 Published 2026-03-04 Fixed in 0.35.0 CWE-400

TI-2026-22708 CVE-2026-28434

cpp-httplib's default exception handler leaks e.what() to clients via EXCEPTION_WHAT response header

LOW 30

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00349 Published 2026-03-04 Fixed in 0.35.0 CWE-200

TI-2026-18294 CVE-2026-22776

cpp-httplib vulnerable to a denial of service (DOS) using a zip bomb

HIGH 77

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00411 Published 2026-01-12 Fixed in 0.30.1 CWE-409

TI-2026-17313 CVE-2026-21428

cpp-httplib has CRLF injection in http headers

HIGH 73

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00404 Published 2026-01-01 Fixed in 0.30.0 CWE-93

TI-2025-40987 CVE-2025-66577

cpp-httplib Untrusted HTTP Header Handling: X-Forwarded-For/X-Real-IP Trust

MEDIUM 63

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00294 Published 2025-12-05 Fixed in 0.27.0 CWE-117

TI-2025-40980 CVE-2025-66570

cpp-httplib Untrusted HTTP Header Handling: Internal Header Shadowing (REMOTE/LOCAL)

MEDIUM 49

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00348 Published 2025-12-05 Fixed in 0.27.0 CWE-290

TI-2025-33556 CVE-2025-53629

cpp-httplib Unbounded Memory Allocation in Chunked/No-Length Requests Vulnerability

HIGH 72

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00594 Published 2025-07-10 Fixed in 0.23.0 CWE-770

TI-2025-33555 CVE-2025-53628

cpp-httplib does not limit the length of a line

HIGH 67

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00524 Published 2025-07-10 Fixed in 0.20.1 CWE-770

TI-2025-32923 CVE-2025-52887

cpp-httplib has unlimited number of http header fields, which causes memory leak

HIGH 72

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0049 Published 2025-06-26 No fix listed CWE-400

TI-2025-29399 CVE-2025-46728

cpp-httplib has Unbounded Memory Allocation in Chunked/No-Length Requests

HIGH 72

cpp-httplib is a C++ header-only HTTP/HTTPS server and client library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00675 Published 2025-05-06 Fixed in 0.20.1 CWE-400

TI-2025-00697 CVE-2025-0825 · GHSA-65rj-829h-6g8x

CRLF injection in Cpp-httplib

LOW 31

cpp-httplib version v0.17.3 through v0.18.3 fails to filter CRLF characters ("\r\n") when those are prefixed with a null byte.

CVSS 4.0MEDIUM 6.9 Network No auth User interaction EPSS 0.00409 Published 2025-02-04 No fix listed CWE-113

TI-2020-09400 CVE-2020-11709 · GHSA-fxvr-q2f8-9vxv

cpp-httplib through 0.5.8 does not filter \r\n in parameters passed into the set_redirect…

LOW 36

cpp-httplib through 0.5.8 does not filter \r\n in parameters passed into the set_redirect and set_header functions, which creates possibilities for CRLF injection and HTTP response splitting in some specific contexts.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01684 Published 2020-04-12 No fix listed CWE-74