Lucene search
+L

416 matches found

SUSE CVE
SUSE CVE
•added 2026/08/28 4:38 p.m.•18 views

SUSE CVE-2026-77341

cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names and values directly to the socket without validating them, allowing CRLF sequences in a trailer field to inject additional headers or split the HTTP respons...

5.3CVSS5.9AI score0.00461EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2026/08/28 12:18 a.m.•25 views

DEBIAN-CVE-2026-77341

cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names and values directly to the socket without validating them, allowing CRLF sequences in a trailer field to inject additional headers or split the HTTP respons...

5.3CVSS5.9AI score0.00461EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/28 12:18 a.m.•29 views

CVE-2026-77341

cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names and values directly to the socket without validating them, allowing CRLF sequences in a trailer field to inject additional headers or split the HTTP respons...

5.3CVSS0.00461EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/28 12:18 a.m.•27 views

CVE-2026-77358

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdownandclose the SSL object is freed and the pointer...

8.2CVSS0.00445EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/08/28 12:18 a.m.•101 views

DEBIAN-CVE-2026-77358

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdownandclose the SSL object is freed and the pointer...

8.2CVSS5.8AI score0.00445EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/08/28 12:18 a.m.•19 views

UBUNTU-CVE-2026-77358

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdownandclose the SSL object is freed and the pointer...

8.2CVSS5.8AI score0.00445EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2026/08/28 12:18 a.m.•21 views

UBUNTU-CVE-2026-77341

cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names and values directly to the socket without validating them, allowing CRLF sequences in a trailer field to inject additional headers or split the HTTP respons...

5.3CVSS5.9AI score0.00461EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/08/28 12:18 a.m.•19 views

CVE-2026-77341

cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names and values directly to the socket without validating them, allowing CRLF sequences in a trailer field to inject additional headers or split the HTTP respons...

5.3CVSS5.9AI score0.00461EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/08/28 12:18 a.m.•21 views

CVE-2026-77358

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdownandclose the SSL object is freed and the pointer...

8.2CVSS5.7AI score0.00445EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/08/28 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2026-77358

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing th...

8.2CVSS5.7AI score0.00445EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/08/28 12:00 a.m.•25 views

Linux Distros Unpatched Vulnerability : CVE-2026-77341

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names and values directly...

5.3CVSS5.9AI score0.00461EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•4 views

CVE-2026-77358: Use After Free

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdownandclose the SSL object is freed and the pointer...

8.2CVSS5.8AI score0.00445EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•7 views

CVE-2026-77341: Improper Neutralization of CRLF Sequences

cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names and values directly to the socket without validating them, allowing CRLF sequences in a trailer field to inject additional headers or split the HTTP respons...

5.3CVSS5.9AI score0.00461EPSS
SaveExploits0References3
Mend
Mend
•added 2026/08/27 10:37 p.m.•10 views

CVE-2026-77358

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdownandclose the SSL object is freed and the pointer...

8.2CVSS5.8AI score0.00445EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/08/27 10:37 p.m.•22 views

CVE-2026-77358 cpp-httplib: Use-after-free of TLS session in WebSocketClient::shutdown_and_close()

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdownandclose the SSL object is freed and the pointer...

8.2CVSS5.9AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2026/08/27 10:37 p.m.•55 views

CVE-2026-77358 cpp-httplib: Use-after-free of TLS session in WebSocketClient::shutdown_and_close()

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdownandclose the SSL object is freed and the pointer...

8.2CVSS0.00445EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/27 10:37 p.m.•55 views

CVE-2026-77358

cpp-httplib , a C++ header-only HTTP/HTTPS library, is affected by a use-after-free vulnerability in its TLS-enabled WebSocket client (versions 0.33.0 through 0.50.0 ). In WebSocketClient::shutdown_and_close(), the SSL object is freed and its pointer cleared before the WebSocket close frame is se...

8.2CVSS5.8AI score0.00445EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/27 10:37 p.m.•12 views

CVE-2026-77358 cpp-httplib: Use-after-free of TLS session in WebSocketClient::shutdown_and_close()

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdownandclose the SSL object is freed and the pointer...

8.2CVSS5.8AI score0.00445EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/27 10:37 p.m.•20 views

EUVD-2026-67302

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdownandclose the SSL object is freed and the pointer...

8.2CVSS5.8AI score0.00445EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/08/27 10:37 p.m.•34 views

CVE-2026-77358

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdownandclose the SSL object is freed and the pointer...

8.2CVSS5.8AI score0.00445EPSS
SaveExploits0
Rows per page
Query Builder