# yhirose cpp-httplib.

Every CVE that names yhirose cpp-httplib among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [cpp-httplib open_stream serializes CRLF in request target into HTTP request line](https://agentprime.io/advisories/CVE-2026-103930.md)
  `CVE-2026-103930` · CVE record: yhirose cpp-httplib · CVSS 3.7 Low · Not analysed yet · Published 14 Oct 2026 · Tags: Other injection
- [cpp-httplib: Cookie header leaked on cross-origin redirect](https://agentprime.io/advisories/CVE-2026-102944.md)
  `CVE-2026-102944` · CVE record: yhirose cpp-httplib · CVSS 7.5 High · Not analysed yet · Published 14 Oct 2026 · Tags: Hard-coded credentials
- [cpp-httplib: Use-after-free of TLS session in WebSocketClient::shutdown_and_close()](https://agentprime.io/advisories/CVE-2026-77358.md)
  `CVE-2026-77358` · CVE record: yhirose cpp-httplib · CVSS 8.2 High · Not analysed yet · Published 27 Aug 2026 · Tags: Memory corruption
- [cpp-httplib: CRLF injection via unvalidated HTTP trailer headers in chunked response writing](https://agentprime.io/advisories/CVE-2026-77341.md)
  `CVE-2026-77341` · CVE record: yhirose cpp-httplib · CVSS 5.3 Medium · Not analysed yet · Published 27 Aug 2026 · Tags: Other injection
- [cpp-httplib: TLS certificate chain verification bypassed for IP-literal hosts on Mbed TLS and wolfSSL backends](https://agentprime.io/advisories/CVE-2026-54919.md)
  `CVE-2026-54919` · CVE record: yhirose cpp-httplib · CVSS 7.4 High · Not analysed yet · Published 10 Jul 2026 · Tags: Weak cryptography or TLS
- [cpp-httplib: HTTP header value percent-decoding in server-side \`parse_header\` enables CRLF injection](https://agentprime.io/advisories/CVE-2026-45372.md)
  `CVE-2026-45372` · CVE record: yhirose cpp-httplib · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 May 2026 · Tags: Other injection, HTTP request smuggling
- [cpp-httplib: Malicious \`X-Forwarded-For\` Under Trusted-Proxy Configuration Triggers Empty \`vector::front()\`, Leading to Undefined Behavior and Server Crash](https://agentprime.io/advisories/CVE-2026-46527.md)
  `CVE-2026-46527` · CVE record: yhirose cpp-httplib · CVSS 8.7 High · Not analysed yet · Published 29 May 2026 · Tags: Memory corruption
- [cpp-httplib DoS: Negative chunk-size in chunked Transfer-Encoding](https://agentprime.io/advisories/CVE-2026-45352.md)
  `CVE-2026-45352` · CVE record: yhirose cpp-httplib · CVSS 5.3 Medium · Not analysed yet · Published 29 May 2026 · Tags: Denial of service, CWE-20, CWE-1285
- [cpp-httplib: HTTP Request Smuggling via Unconsumed GET Request Body](https://agentprime.io/advisories/CVE-2026-34441.md)
  `CVE-2026-34441` · CVE record: yhirose cpp-httplib · CVSS 4.8 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: HTTP request smuggling
- [cpp-httplib Client Leaks Authentication Credentials to Untrusted Hosts on Cross-Origin HTTP Redirect](https://agentprime.io/advisories/CVE-2026-33745.md)
  `CVE-2026-33745` · CVE record: yhirose cpp-httplib · CVSS 7.4 High · Not analysed yet · Published 27 Mar 2026 · Tags: Information disclosure
- [cpp-httplib has a Silent TLS Certificate Verification Bypass on HTTPS Redirect via Proxy](https://agentprime.io/advisories/CVE-2026-32627.md)
  `CVE-2026-32627` · CVE record: yhirose cpp-httplib · CVSS 8.7 High · Not analysed yet · Published 13 Mar 2026 · Tags: Weak cryptography or TLS
- [cpp-httplib Affected by Remote Process Crash via Malformed Content-Length Response Header](https://agentprime.io/advisories/CVE-2026-31870.md)
  `CVE-2026-31870` · CVE record: yhirose cpp-httplib · CVSS 7.5 High · Not analysed yet · Published 11 Mar 2026 · Tags: CWE-248
- [cpp-httplib: Stack Overflow Denial of Service (DoS) via std::regex in multipart filename parsing](https://agentprime.io/advisories/CVE-2026-29076.md)
  `CVE-2026-29076` · CVE record: yhirose cpp-httplib · CVSS 5.9 Medium · Not analysed yet · Published 7 Mar 2026 · Tags: Denial of service
- [Payload size limit bypass via gzip decompression in ContentReader (streaming) allows oversized request bodies in cpp-httplib](https://agentprime.io/advisories/CVE-2026-28435.md)
  `CVE-2026-28435` · CVE record: yhirose cpp-httplib · CVSS 7.5 High · Not analysed yet · Published 4 Mar 2026 · Tags: Denial of service, CWE-409
- [cpp-httplib's default exception handler leaks e.what() to clients via EXCEPTION_WHAT response header](https://agentprime.io/advisories/CVE-2026-28434.md)
  `CVE-2026-28434` · CVE record: yhirose cpp-httplib · CVSS 5.3 Medium · Not analysed yet · Published 4 Mar 2026 · Tags: Information disclosure
- [cpp-httplib vulnerable to a denial of service (DOS) using a zip bomb](https://agentprime.io/advisories/CVE-2026-22776.md)
  `CVE-2026-22776` · CVE record: yhirose cpp-httplib · CVSS 8.7 High · Not analysed yet · Published 12 Jan 2026 · Tags: CWE-409
- [cpp-httplib has CRLF injection in http headers](https://agentprime.io/advisories/CVE-2026-21428.md)
  `CVE-2026-21428` · CVE record: yhirose cpp-httplib · CVSS 7.7 High · Not analysed yet · Published 1 Jan 2026 · Tags: Other injection
- [cpp-httplib Untrusted HTTP Header Handling: X-Forwarded-For/X-Real-IP Trust](https://agentprime.io/advisories/CVE-2025-66577.md)
  `CVE-2025-66577` · CVE record: yhirose cpp-httplib · CVSS 5.3 Medium · Not analysed yet · Published 5 Dec 2025 · Tags: Other injection, CWE-807
- [cpp-httplib Untrusted HTTP Header Handling: Internal Header Shadowing (REMOTE\*/LOCAL\*)](https://agentprime.io/advisories/CVE-2025-66570.md)
  `CVE-2025-66570` · CVE record: yhirose cpp-httplib · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Dec 2025 · Tags: Authentication bypass, CWE-345, CWE-807
- [cpp-httplib Unbounded Memory Allocation in Chunked/No-Length Requests Vulnerability](https://agentprime.io/advisories/CVE-2025-53629.md)
  `CVE-2025-53629` · CVE record: yhirose cpp-httplib · CVSS 7.5 High · Not analysed yet · Published 10 Jul 2025 · Tags: Denial of service
- [cpp-httplib does not limit the length of a line](https://agentprime.io/advisories/CVE-2025-53628.md)
  `CVE-2025-53628` · CVE record: yhirose cpp-httplib · CVSS 6.3 Medium · Not analysed yet · Published 10 Jul 2025 · Tags: Denial of service
- [cpp-httplib has unlimited number of http header fields, which causes memory leak](https://agentprime.io/advisories/CVE-2025-52887.md)
  `CVE-2025-52887` · CVE record: yhirose cpp-httplib · CVSS 7.5 High · Not analysed yet · Published 26 Jun 2025 · Tags: Denial of service
- [cpp-httplib has Unbounded Memory Allocation in Chunked/No-Length Requests](https://agentprime.io/advisories/CVE-2025-46728.md)
  `CVE-2025-46728` · CVE record: yhirose cpp-httplib · CVSS 7.5 High · Not analysed yet · Published 6 May 2025 · Tags: Denial of service
- [CRLF injection in yhirose/cpp-httplib](https://agentprime.io/advisories/CVE-2023-26130.md)
  `CVE-2023-26130` · CVE record: yhirose/cpp-httplib · CVSS 7.5 High · Not analysed yet · Published 30 May 2023 · Tags: Command injection, Other injection

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=yhirose-cpp-httplib>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/yhirose-cpp-httplib/>. Everything for agents: <https://agentprime.io/llms.txt>.