CVE-2025-63653

The Monkey open-source HTTP server is vulnerable to an out-of-bounds read in the mk_vhost_fdt_close function located in mk_server/mk_vhost.c (specifically in monkey commit f37e984 ). An attacker can exploit this flaw by sending a crafted HTTP request to the server to cause a Denial of Service (Do...