Yhirose

Cpp-httplib

22 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.9

CVE-2026-29076

Exploit
  • EPSS 0.6%
  • Veröffentlicht 07.03.2026 16:08:56
  • Zuletzt bearbeitet 09.03.2026 21:19:35

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.37.0, cpp-httplib uses std::regex (libstdc++) to parse RFC 5987 encoded filename* values in multipart Content-Disposition headers. The regex engine i...

7.5

CVE-2026-28435

Exploit
  • EPSS 0.42%
  • Veröffentlicht 04.03.2026 19:36:33
  • Zuletzt bearbeitet 05.03.2026 22:09:45

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.35.0, cpp-httplib (httplib.h) does not enforce Server::set_payload_max_length() on the decompressed request body when using HandlerWithContentReader (streami...

5.3

CVE-2026-28434

Exploit
  • EPSS 0.3%
  • Veröffentlicht 04.03.2026 19:34:30
  • Zuletzt bearbeitet 05.03.2026 22:11:16

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.35.0, when a request handler throws a C++ exception and the application has not registered a custom exception handler via set_exception_handler(), the librar...

7.5

CVE-2026-22776

Exploit
  • EPSS 0.36%
  • Veröffentlicht 12.01.2026 18:18:01
  • Zuletzt bearbeitet 15.01.2026 22:43:10

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.30.1, a Denial of Service (DoS) vulnerability exists in cpp-httplib due to the unsafe handling of compressed HTTP request bodies (Content-Encoding: g...

7.5

CVE-2026-21428

Exploit
  • EPSS 0.39%
  • Veröffentlicht 01.01.2026 17:54:43
  • Zuletzt bearbeitet 06.01.2026 18:20:44

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.30.0, the ``write_headers`` function does not check for CR & LF characters in user supplied headers, allowing untrusted header value to escape header...

5.3

CVE-2025-66577

Exploit
  • EPSS 0.27%
  • Veröffentlicht 05.12.2025 18:20:25
  • Zuletzt bearbeitet 11.12.2025 18:09:30

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can sup...

9.8

CVE-2025-66570

Exploit
  • EPSS 0.33%
  • Veröffentlicht 05.12.2025 18:18:02
  • Zuletzt bearbeitet 10.12.2025 15:02:46

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can inj...

7.5

CVE-2025-53629

Exploit
  • EPSS 0.51%
  • Veröffentlicht 10.07.2025 19:46:01
  • Zuletzt bearbeitet 06.08.2025 18:09:49

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.23.0, incoming requests using Transfer-Encoding: chunked in the header can allocate memory arbitrarily in the server, potentially leading to its exhaustion. ...

8.8

CVE-2025-53628

Exploit
  • EPSS 0.44%
  • Veröffentlicht 10.07.2025 19:45:54
  • Zuletzt bearbeitet 06.08.2025 18:08:15

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.20.1, cpp-httplib does not have a limit for a unique line, permitting an attacker to explore this to allocate memory arbitrarily. This vulnerability is fixed...

7.5

CVE-2025-52887

Exploit
  • EPSS 0.43%
  • Veröffentlicht 26.06.2025 14:31:52
  • Zuletzt bearbeitet 06.08.2025 19:15:01

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In version 0.21.0, when many http headers fields are passed in, the library does not limit the number of headers, and the memory associated with the headers will not be...