📦 Cpp Httplib

by Yhirose

🔍 What is Cpp Httplib?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2025-66570

CRITICAL CVSS 10.0 Dec 5, 2025

This vulnerability in cpp-httplib allows attackers to inject HTTP headers (REMOTE_ADDR, REMOTE_PORT, LOCAL_ADDR, LOCAL_PORT) that shadow server-generated metadata. This enables IP spoofing, log poison...

CVE-2026-28435

HIGH CVSS 7.5 Mar 4, 2026

This vulnerability in cpp-httplib allows attackers to bypass configured payload size limits by sending compressed HTTP requests. When using streaming content readers with gzip or other supported encod...

CVE-2026-22776

HIGH CVSS 7.5 Jan 12, 2026

A Denial of Service vulnerability exists in cpp-httplib where compressed HTTP request bodies are not properly limited after decompression. Attackers can send small compressed payloads that expand to c...

CVE-2025-53629

HIGH CVSS 7.5 Jul 10, 2025

This vulnerability in cpp-httplib allows attackers to send specially crafted HTTP requests with Transfer-Encoding: chunked headers that cause uncontrolled memory allocation, potentially leading to ser...

CVE-2025-52887

HIGH CVSS 7.5 Jun 26, 2025

CVE-2025-52887 is a memory exhaustion vulnerability in cpp-httplib where excessive HTTP headers cause memory leaks when connections disconnect, potentially crashing servers. This affects any applicati...

CVE-2026-28434

MEDIUM CVSS 5.3 Mar 4, 2026

This vulnerability in cpp-httplib leaks internal exception messages to unauthenticated clients when request handlers throw C++ exceptions. Any application using cpp-httplib versions before 0.35.0 with...

CVE-2025-66577

MEDIUM CVSS 5.3 Dec 5, 2025

This vulnerability in cpp-httplib allows attackers to spoof client IP addresses by sending malicious X-Forwarded-For or X-Real-IP headers. This can poison server logs, evade audit trails, and potentia...

CVE-2025-0825

MEDIUM CVSS 5.3 Feb 4, 2025

CVE-2025-0825 is a CRLF injection vulnerability in cpp-httplib where null-byte-prefixed CRLF sequences aren't properly filtered, allowing attackers to inject malicious headers or content into HTTP res...