cve-2016-5699-jinzheng-sha

cve-2016-5699-report Reading Course Report This repo references an example. simple-client.py is a Python script to make HTTP requests to the URL passed from a command argument. simple-server.py uses Flask to construct a simple HTTP server to print the headers of received requests. Set Up Install...

OESA-2026-4523 cpp-httplib security update

A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include httplib.h file in your code! Security Fixes: cpp-httplib is a C++ header-only HTTP/HTTPS library. Prior to 0.51.0, createredirectclient removes Host, Proxy-Authorization, and Authorizatio...

OESA-2026-4524 cpp-httplib security update

A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include httplib.h file in your code! Security Fixes: cpp-httplib is a C++ header-only HTTP/HTTPS library. Prior to 0.51.0, createredirectclient removes Host, Proxy-Authorization, and Authorizatio...

OESA-2026-4522 cpp-httplib security update

A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include httplib.h file in your code! Security Fixes: cpp-httplib is a C++ header-only HTTP/HTTPS library. Prior to 0.51.0, createredirectclient removes Host, Proxy-Authorization, and Authorizatio...

OESA-2026-4521 cpp-httplib security update

A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include httplib.h file in your code! Security Fixes: cpp-httplib is a C++ header-only HTTP/HTTPS library. Prior to 0.51.0, createredirectclient removes Host, Proxy-Authorization, and Authorizatio...

cpp-httplib create_redirect_client Unauthorized Access

The vulnerability of the createredirectclient function in the cpp-httplib library is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Astra Linux – vulnerability in cpp-httplib

cpp-httplib is a C++11 single-file header-only cross-platform HTTP/HTTPS library. Prior to version 0.39.0, the cpp-httplib HTTP client forwarded stored Basic Auth, Bearer Token, and Digest Auth credentials to arbitrary hosts when following cross-origin HTTP redirects 301/302/307/308. A malicious ...

Astra Linux – vulnerability in cpp-httplib

cpp-httplib is a C++11 single-file header-only cross-platform HTTP/HTTPS library. Prior to version 0.35.0, cpp-httplib httplib.h did not enforce Server::setpayloadmaxlength on the decompressed request body when using HandlerWithContentReader streaming ContentReader with Content-Encoding: gzip or...

Astra Linux – vulnerability in cpp-httplib

cpp-httplib is a C++11 single-file header-only cross-platform HTTP/HTTPS library. Prior to version 0.30.1, a Denial of Service DoS vulnerability exists in cpp-httplib due to the unsafe handling of compressed HTTP request bodies Content-Encoding: gzip, br, etc.. The library validates the...

Astra Linux – vulnerability in cpp-httplib

cpp-httplib is a C++11 single-file header-only cross-platform HTTP/HTTPS library. Prior to version 0.44.0, when cpp-httplib’s server parsed an incoming request, it applied percent-decoding to every header value except Location and Referer. A validity check isfieldvalue was performed prior to...

Astra Linux – vulnerability in cpp-httplib

cpp-httplib is a C++11 single-file header-only cross-platform HTTP/HTTPS library. Prior to version 0.35.0, when a request handler throws a C++ exception and the application has not registered a custom exception handler via setexceptionhandler, the library catches the exception and writes its...

Astra Linux – vulnerability in cpp-httplib

cpp-httplib is a C++11 single-file header-only cross-platform HTTP/HTTPS library. Prior to version 0.37.0, cpp-httplib used std::regex libstdc++ to parse RFC 5987 encoded filename values within multipart Content-Disposition headers. The regex engine in libstdc++ implements backtracking via deep...

Astra Linux – vulnerability in cpp-httplib

cpp-httplib is a C++11 single-file header-only cross-platform HTTP/HTTPS library. Prior to version 0.43.4, a negative chunk size in chunked Transfer-Encoding could lead to unbounded memory allocation and a process crash. The ChunkedDecoder::readpayload function in cpp-httplib httplib.h parses the...

Linux Distros Unpatched Vulnerability : CVE-2026-103930

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpp-httplib is a C++ header-only HTTP/HTTPS library. From 0.29.0 until 0.51.0, Client::openstream in httplib.h accepts a caller-controlled path that reaches...

Linux Distros Unpatched Vulnerability : CVE-2026-102944

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpp-httplib is a C++ header-only HTTP/HTTPS library. Prior to 0.51.0, createredirectclient removes Host, Proxy-Authorization, and Authorization headers when...

SUSE CVE-2026-102944

cpp-httplib is a C++ header-only HTTP/HTTPS library. Prior to 0.51.0, createredirectclient removes Host, Proxy-Authorization, and Authorization headers when following a cross-origin 301, 302, 307, or 308 redirect but leaves Cookie headers attached. detail::redirect copies the request for those...

SUSE CVE-2026-103930

cpp-httplib is a C++ header-only HTTP/HTTPS library. From 0.29.0 until 0.51.0, Client::openstream in httplib.h accepts a caller-controlled path that reaches detail::writerequestline without the detail::encodepath protection used by the ordinary buffered request path. Raw carriage-return and...

CVE-2026-103930

A flaw was found in cpp-httplib. The library is vulnerable to HTTP request splitting due to improper encoding of carriage-return and line-feed characters within streaming request paths. If an application forwards untrusted user input to the streaming client interface, a remote attacker can supply...

CVE-2026-102944

A flaw was found in cpp-httplib. When following cross-origin HTTP redirects, the client fails to remove Cookie headers before sending the request to the new target. A remote attacker controlling a redirect server or observing unencrypted traffic can exploit this flaw to capture session cookies...

UBUNTU-CVE-2026-103930

cpp-httplib is a C++ header-only HTTP/HTTPS library. From 0.29.0 until 0.51.0, Client::openstream in httplib.h accepts a caller-controlled path that reaches detail::writerequestline without the detail::encodepath protection used by the ordinary buffered request path. Raw carriage-return and...