CVE-2026-103930

cpp-httplib is a C++ header-only HTTP/HTTPS library. From 0.29.0 until 0.51.0, Client::openstream in httplib.h accepts a caller-controlled path that reaches detail::writerequestline without the detail::encodepath protection used by the ordinary buffered request path. Raw carriage-return and...

CVE-2026-103930

The C++ header-only HTTP/HTTPS library cpp-httplib versions 0.29.0 through 0.51.0 contains a vulnerability in Client::open_stream within httplib.h . The issue stems from the library accepting a caller-controlled path that bypasses the detail::encode_path() protection used in other paths. This all...