Log in Start free

yhirose

Products

ProductCVEsExploitedLatest
cpp-httplib23–Oct 14, 2026

Exploited and recent CVEs

  • CVE-2026-103930 Low 3.7 cpp-httplib open_stream serializes CRLF in request target into HTTP request line 0.4%
  • CVE-2026-102944 High 7.5 cpp-httplib: Cookie header leaked on cross-origin redirect 0.4%
  • CVE-2026-77358 High 8.2 cpp-httplib: Use-after-free of TLS session in WebSocketClient::shutdown_and_close() 0.4%
  • CVE-2026-77341 Medium 5.3 cpp-httplib: CRLF injection via unvalidated HTTP trailer headers in chunked response writing 0.5%
  • CVE-2026-54919 High 7.4 cpp-httplib: TLS certificate chain verification bypassed for IP-literal hosts on Mbed TLS and wolfSSL backends 0.3%
  • CVE-2026-45372 Critical 9.9 cpp-httplib: HTTP header value percent-decoding in server-side `parse_header` enables CRLF injection 0.3%
  • CVE-2026-46527 High 8.7 cpp-httplib: Malicious `X-Forwarded-For` Under Trusted-Proxy Configuration Triggers Empty `vector::front()`, Leading to Undefined Behavior and Server Crash 0.3%
  • CVE-2026-45352 Medium 5.3 cpp-httplib DoS: Negative chunk-size in chunked Transfer-Encoding 0.3%
  • CVE-2026-34441 Medium 4.8 cpp-httplib: HTTP Request Smuggling via Unconsumed GET Request Body 0.2%
  • CVE-2026-33745 High 7.4 cpp-httplib Client Leaks Authentication Credentials to Untrusted Hosts on Cross-Origin HTTP Redirect 0.3%
  • CVE-2026-32627 High 8.7 cpp-httplib has a Silent TLS Certificate Verification Bypass on HTTPS Redirect via Proxy 0.2%
  • CVE-2026-31870 High 7.5 cpp-httplib Affected by Remote Process Crash via Malformed Content-Length Response Header 0.5%
  • CVE-2026-29076 Medium 5.9 cpp-httplib: Stack Overflow Denial of Service (DoS) via std::regex in multipart filename parsing 0.7%
  • CVE-2026-28435 High 7.5 Payload size limit bypass via gzip decompression in ContentReader (streaming) allows oversized request bodies in cpp-httplib 0.5%
  • CVE-2026-28434 Medium 5.3 cpp-httplib's default exception handler leaks e.what() to clients via EXCEPTION_WHAT response header 0.3%
  • CVE-2026-22776 High 8.7 cpp-httplib vulnerable to a denial of service (DOS) using a zip bomb 0.4%
  • CVE-2026-21428 High 7.7 cpp-httplib has CRLF injection in http headers 0.4%
  • CVE-2025-66577 Medium 5.3 cpp-httplib Untrusted HTTP Header Handling: X-Forwarded-For/X-Real-IP Trust 0.3%
  • CVE-2025-66570 Critical 10.0 cpp-httplib Untrusted HTTP Header Handling: Internal Header Shadowing (REMOTE*/LOCAL*) 0.3%
  • CVE-2025-53629 High 7.5 cpp-httplib Unbounded Memory Allocation in Chunked/No-Length Requests Vulnerability 0.6%
  • CVE-2025-53628 Medium 6.3 cpp-httplib does not limit the length of a line 0.5%
  • CVE-2025-52887 High 7.5 cpp-httplib has unlimited number of http header fields, which causes memory leak 0.5%
  • CVE-2025-46728 High 7.5 cpp-httplib has Unbounded Memory Allocation in Chunked/No-Length Requests 0.7%