CVE-2025-63652

A use-after-free vulnerability (CVE-2025-63652) exists in Monkey’s HTTP server code path mk_http_request_end (file mk_server/mk_http.c) triggered by crafted HTTP requests. Reported against commit f37e984, it can cause Denial of Service. The issue is documented across multiple sources (Red Hat, NV...