cpp-httplib vulnerabilities (Debian)
24 vulnerabilities.
-
cpp-httplibDebian cpp-httplib open_stream serializes CRLF in request target into HTTP request line 3.7 Low -
cpp-httplibDebian cpp-httplib: Cookie header leaked on cross-origin redirect 7.5 High -
cpp-httplibDebian cpp-httplib: Use-after-free of TLS session in WebSocketClient::shutdown_and_close() 8.2 High -
cpp-httplibDebian cpp-httplib: CRLF injection via unvalidated HTTP trailer headers in chunked response writing 5.3 Medium -
cpp-httplibDebian cpp-httplib: TLS certificate chain verification bypassed for IP-literal hosts on Mbed TLS and wolfSSL backends 7.4 High -
cpp-httplibDebian cpp-httplib: HTTP header value percent-decoding in server-side `parse_header` enables CRLF injection 9.9 Critical -
cpp-httplibDebian cpp-httplib: Malicious `X-Forwarded-For` Under Trusted-Proxy Configuration Triggers Empty `vector::front()`, Leading to Undefined Behavior and Server Crash 8.7 High -
cpp-httplibDebian cpp-httplib DoS: Negative chunk-size in chunked Transfer-Encoding 5.3 Medium -
cpp-httplibDebian cpp-httplib: HTTP Request Smuggling via Unconsumed GET Request Body 4.8 Medium -
cpp-httplibDebian cpp-httplib Client Leaks Authentication Credentials to Untrusted Hosts on Cross-Origin HTTP Redirect 7.4 High -
cpp-httplibDebian cpp-httplib has a Silent TLS Certificate Verification Bypass on HTTPS Redirect via Proxy 8.7 High -
cpp-httplibDebian cpp-httplib Affected by Remote Process Crash via Malformed Content-Length Response Header 7.5 High -
cpp-httplibDebian cpp-httplib: Stack Overflow Denial of Service (DoS) via std::regex in multipart filename parsing 5.9 Medium -
cpp-httplibDebian Payload size limit bypass via gzip decompression in ContentReader (streaming) allows oversized request bodies in cpp-httplib 7.5 High -
cpp-httplibDebian cpp-httplib's default exception handler leaks e.what() to clients via EXCEPTION_WHAT response header 5.3 Medium -
cpp-httplibDebian cpp-httplib vulnerable to a denial of service (DOS) using a zip bomb 8.7 High -
cpp-httplibDebian cpp-httplib has CRLF injection in http headers 7.7 High -
cpp-httplibDebian cpp-httplib Untrusted HTTP Header Handling: X-Forwarded-For/X-Real-IP Trust 5.3 Medium -
cpp-httplibDebian cpp-httplib Untrusted HTTP Header Handling: Internal Header Shadowing (REMOTE*/LOCAL*) 10.0 Critical -
cpp-httplibDebian cpp-httplib Unbounded Memory Allocation in Chunked/No-Length Requests Vulnerability 7.5 High -
cpp-httplibDebian cpp-httplib does not limit the length of a line 6.3 Medium -
cpp-httplibDebian cpp-httplib has Unbounded Memory Allocation in Chunked/No-Length Requests 7.5 High -
cpp-httplibDebian CRLF injection in Cpp-httplib 6.9 Medium -
cpp-httplibDebian Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when... 7.5 High