yhirose cpp-httplib.

cpp-httplib open_stream serializes CRLF in request target into HTTP request line

• yhirose cpp-httplib
• Other injection

cpp-httplib: Cookie header leaked on cross-origin redirect

• yhirose cpp-httplib
• Hard-coded credentials

cpp-httplib: Use-after-free of TLS session in WebSocketClient::shutdown_and_close()

• yhirose cpp-httplib
• Memory corruption

cpp-httplib: CRLF injection via unvalidated HTTP trailer headers in chunked response writing

• yhirose cpp-httplib
• Other injection

cpp-httplib: TLS certificate chain verification bypassed for IP-literal hosts on Mbed TLS and wolfSSL backends

• yhirose cpp-httplib
• Weak cryptography or TLS

cpp-httplib: HTTP header value percent-decoding in server-side `parse_header` enables CRLF injection

• yhirose cpp-httplib
• Other injection
• HTTP request smuggling

cpp-httplib: Malicious `X-Forwarded-For` Under Trusted-Proxy Configuration Triggers Empty `vector::front()`, Leading to Undefined Behavior and Server Crash

• yhirose cpp-httplib
• Memory corruption

cpp-httplib DoS: Negative chunk-size in chunked Transfer-Encoding

• yhirose cpp-httplib
• Denial of service
• CWE-20

cpp-httplib: HTTP Request Smuggling via Unconsumed GET Request Body

• yhirose cpp-httplib
• HTTP request smuggling

cpp-httplib Client Leaks Authentication Credentials to Untrusted Hosts on Cross-Origin HTTP Redirect

• yhirose cpp-httplib
• Information disclosure

cpp-httplib has a Silent TLS Certificate Verification Bypass on HTTPS Redirect via Proxy

• yhirose cpp-httplib
• Weak cryptography or TLS

cpp-httplib Affected by Remote Process Crash via Malformed Content-Length Response Header

• yhirose cpp-httplib
• CWE-248

cpp-httplib: Stack Overflow Denial of Service (DoS) via std::regex in multipart filename parsing

• yhirose cpp-httplib
• Denial of service

Payload size limit bypass via gzip decompression in ContentReader (streaming) allows oversized request bodies in cpp-httplib

• yhirose cpp-httplib
• Denial of service
• CWE-409

cpp-httplib's default exception handler leaks e.what() to clients via EXCEPTION_WHAT response header

• yhirose cpp-httplib
• Information disclosure

cpp-httplib vulnerable to a denial of service (DOS) using a zip bomb

• yhirose cpp-httplib
• CWE-409

cpp-httplib has CRLF injection in http headers

• yhirose cpp-httplib
• Other injection

cpp-httplib Untrusted HTTP Header Handling: X-Forwarded-For/X-Real-IP Trust

• yhirose cpp-httplib
• Other injection
• CWE-807

cpp-httplib Untrusted HTTP Header Handling: Internal Header Shadowing (REMOTE*/LOCAL*)

• yhirose cpp-httplib
• Authentication bypass
• CWE-345

cpp-httplib Unbounded Memory Allocation in Chunked/No-Length Requests Vulnerability

• yhirose cpp-httplib
• Denial of service

cpp-httplib does not limit the length of a line

• yhirose cpp-httplib
• Denial of service

cpp-httplib has unlimited number of http header fields, which causes memory leak

• yhirose cpp-httplib
• Denial of service

cpp-httplib has Unbounded Memory Allocation in Chunked/No-Length Requests

• yhirose cpp-httplib
• Denial of service

CRLF injection in yhirose/cpp-httplib

• yhirose/cpp-httplib
• Command injection
• Other injection