Lucene search
+L

6 matches found

OSV
OSV
•added 2026/09/25 1:28 a.m.•9 views

OESA-2026-4093 cpp-httplib security update

A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include httplib.h file in your code! Security Fixes: cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names a...

5.3CVSS5.6AI score0.00461EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/25 1:28 a.m.•8 views

OESA-2026-4094 cpp-httplib security update

A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include httplib.h file in your code! Security Fixes: cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names a...

5.3CVSS5.6AI score0.00461EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/25 1:28 a.m.•10 views

OESA-2026-4092 cpp-httplib security update

A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include httplib.h file in your code! Security Fixes: cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names a...

5.3CVSS5.6AI score0.00461EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/21 12:00 a.m.•4 views

CVE-2026-73513: Improper Input Validation

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's optional oghttp2 upstream HTTP/2 codec accepts a response trailer HEADERS frame without ENDSTREAM. Envoy completes and deferred-deletes the ActiveRequest...

7.5CVSS5.9AI score0.00476EPSS
SaveExploits1References9
UbuntuCve
UbuntuCve
•added 2026/08/28 12:18 a.m.•15 views

CVE-2026-77341

cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names and values directly to the socket without validating them, allowing CRLF sequences in a trailer field to inject additional headers or split the HTTP respons...

5.3CVSS5.9AI score0.00461EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•2 views

CVE-2026-77341: Improper Neutralization of CRLF Sequences

cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names and values directly to the socket without validating them, allowing CRLF sequences in a trailer field to inject additional headers or split the HTTP respons...

5.3CVSS5.9AI score0.00461EPSS
SaveExploits0References3
Rows per page
Query Builder