ESP32Async
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| ESPAsyncWebServer | 3 | – | Oct 30, 2026 |
Exploited and recent CVEs
- CVE-2026-62966 ESPAsyncWebServer multipart parser has null-pointer write 0.4%
- CVE-2026-54571 ESPAsyncWebServer: Integer overflow in multipart boundary parser causes denial of service 0.5%
- CVE-2025-53094 ESPAsyncWebServer Vulnerable to CRLF Injection in AsyncWebHeader.cpp 0.4%