yhirose vulnerabilities

CVEs per yearBy the year they were published

1. 20256
2. 202617

Newest CVEs

• CVE-2026-103930

  cpp-httplib open_stream serializes CRLF in request target into HTTP request line

  yhirose · cpp-httplib

  Low3.7
• CVE-2026-102944

  cpp-httplib: Cookie header leaked on cross-origin redirect

  yhirose · cpp-httplib

  High7.5
• CVE-2026-77358

  cpp-httplib: Use-after-free of TLS session in WebSocketClient::shutdown_and_close()

  yhirose · cpp-httplib

  High8.2
• CVE-2026-77341

  cpp-httplib: CRLF injection via unvalidated HTTP trailer headers in chunked response writing

  yhirose · cpp-httplib

  Medium5.3
• CVE-2026-54919

  cpp-httplib: TLS certificate chain verification bypassed for IP-literal hosts on Mbed TLS and wolfSSL backends

  yhirose · cpp-httplib

  High7.4
• CVE-2026-45372

  cpp-httplib: HTTP header value percent-decoding in server-side `parse_header` enables CRLF injection

  yhirose · cpp-httplib

  Critical9.9
• CVE-2026-46527

  cpp-httplib: Malicious `X-Forwarded-For` Under Trusted-Proxy Configuration Triggers Empty `vector::front()`, Leading to Undefined Behavior and Server Crash

  yhirose · cpp-httplib

  High8.7
• CVE-2026-45352

  cpp-httplib DoS: Negative chunk-size in chunked Transfer-Encoding

  yhirose · cpp-httplib

  Medium5.3
• CVE-2026-34441

  cpp-httplib: HTTP Request Smuggling via Unconsumed GET Request Body

  yhirose · cpp-httplib

  Medium4.8
• CVE-2026-33745

  cpp-httplib Client Leaks Authentication Credentials to Untrusted Hosts on Cross-Origin HTTP Redirect

  yhirose · cpp-httplib

  High7.4