agentprime: yhirose-cpp-httplibEvery new CVE for yhirose-cpp-httplib.https://agentprime.io/CVE-2026-103930: cpp-httplib open_stream serializes CRLF in request target into HTTP request linehttps://agentprime.io/advisories/CVE-2026-103930/https://agentprime.io/advisories/CVE-2026-103930/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 18:19:38 GMTCVECVE-2026-102944: cpp-httplib: Cookie header leaked on cross-origin redirecthttps://agentprime.io/advisories/CVE-2026-102944/https://agentprime.io/advisories/CVE-2026-102944/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 18:18:21 GMTCVECVE-2026-77358: cpp-httplib: Use-after-free of TLS session in WebSocketClient::shutdown_and_close()https://agentprime.io/advisories/CVE-2026-77358/https://agentprime.io/advisories/CVE-2026-77358/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 22:37:14 GMTCVECVE-2026-77341: cpp-httplib: CRLF injection via unvalidated HTTP trailer headers in chunked response writinghttps://agentprime.io/advisories/CVE-2026-77341/https://agentprime.io/advisories/CVE-2026-77341/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 22:16:45 GMTCVECVE-2026-54919: cpp-httplib: TLS certificate chain verification bypassed for IP-literal hosts on Mbed TLS and wolfSSL backendshttps://agentprime.io/advisories/CVE-2026-54919/https://agentprime.io/advisories/CVE-2026-54919/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 16:06:12 GMTCVECVE-2026-45372: cpp-httplib: HTTP header value percent-decoding in server-side `parse_header` enables CRLF injectionhttps://agentprime.io/advisories/CVE-2026-45372/https://agentprime.io/advisories/CVE-2026-45372/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 May 2026 19:21:12 GMTCVEcriticalCVE-2026-46527: cpp-httplib: Malicious `X-Forwarded-For` Under Trusted-Proxy Configuration Triggers Empty `vector::front()`, Leading to Undefined Behavior and Server Crashhttps://agentprime.io/advisories/CVE-2026-46527/https://agentprime.io/advisories/CVE-2026-46527/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 May 2026 19:18:26 GMTCVECVE-2026-45352: cpp-httplib DoS: Negative chunk-size in chunked Transfer-Encodinghttps://agentprime.io/advisories/CVE-2026-45352/https://agentprime.io/advisories/CVE-2026-45352/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 May 2026 19:14:08 GMTCVECVE-2026-34441: cpp-httplib: HTTP Request Smuggling via Unconsumed GET Request Bodyhttps://agentprime.io/advisories/CVE-2026-34441/https://agentprime.io/advisories/CVE-2026-34441/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Mar 2026 21:21:33 GMTCVECVE-2026-33745: cpp-httplib Client Leaks Authentication Credentials to Untrusted Hosts on Cross-Origin HTTP Redirecthttps://agentprime.io/advisories/CVE-2026-33745/https://agentprime.io/advisories/CVE-2026-33745/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 00:46:48 GMTCVECVE-2026-32627: cpp-httplib has a Silent TLS Certificate Verification Bypass on HTTPS Redirect via Proxyhttps://agentprime.io/advisories/CVE-2026-32627/https://agentprime.io/advisories/CVE-2026-32627/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Mar 2026 20:48:14 GMTCVECVE-2026-31870: cpp-httplib Affected by Remote Process Crash via Malformed Content-Length Response Headerhttps://agentprime.io/advisories/CVE-2026-31870/https://agentprime.io/advisories/CVE-2026-31870/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Mar 2026 17:57:49 GMTCVECVE-2026-29076: cpp-httplib: Stack Overflow Denial of Service (DoS) via std::regex in multipart filename parsinghttps://agentprime.io/advisories/CVE-2026-29076/https://agentprime.io/advisories/CVE-2026-29076/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 07 Mar 2026 16:08:56 GMTCVECVE-2026-28435: Payload size limit bypass via gzip decompression in ContentReader (streaming) allows oversized request bodies in cpp-httplibhttps://agentprime.io/advisories/CVE-2026-28435/https://agentprime.io/advisories/CVE-2026-28435/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Mar 2026 19:36:33 GMTCVECVE-2026-28434: cpp-httplib's default exception handler leaks e.what() to clients via EXCEPTION_WHAT response headerhttps://agentprime.io/advisories/CVE-2026-28434/https://agentprime.io/advisories/CVE-2026-28434/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Mar 2026 19:34:30 GMTCVECVE-2026-22776: cpp-httplib vulnerable to a denial of service (DOS) using a zip bombhttps://agentprime.io/advisories/CVE-2026-22776/https://agentprime.io/advisories/CVE-2026-22776/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Jan 2026 18:18:01 GMTCVECVE-2026-21428: cpp-httplib has CRLF injection in http headershttps://agentprime.io/advisories/CVE-2026-21428/https://agentprime.io/advisories/CVE-2026-21428/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Jan 2026 17:54:43 GMTCVECVE-2025-66577: cpp-httplib Untrusted HTTP Header Handling: X-Forwarded-For/X-Real-IP Trusthttps://agentprime.io/advisories/CVE-2025-66577/https://agentprime.io/advisories/CVE-2025-66577/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Dec 2025 18:20:25 GMTCVECVE-2025-66570: cpp-httplib Untrusted HTTP Header Handling: Internal Header Shadowing (REMOTE*/LOCAL*)https://agentprime.io/advisories/CVE-2025-66570/https://agentprime.io/advisories/CVE-2025-66570/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Dec 2025 18:18:02 GMTCVEcriticalCVE-2025-53629: cpp-httplib Unbounded Memory Allocation in Chunked/No-Length Requests Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-53629/https://agentprime.io/advisories/CVE-2025-53629/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Jul 2025 19:46:01 GMTCVECVE-2025-53628: cpp-httplib does not limit the length of a linehttps://agentprime.io/advisories/CVE-2025-53628/https://agentprime.io/advisories/CVE-2025-53628/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Jul 2025 19:45:54 GMTCVECVE-2025-52887: cpp-httplib has unlimited number of http header fields, which causes memory leakhttps://agentprime.io/advisories/CVE-2025-52887/https://agentprime.io/advisories/CVE-2025-52887/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Jun 2025 14:31:52 GMTCVECVE-2025-46728: cpp-httplib has Unbounded Memory Allocation in Chunked/No-Length Requestshttps://agentprime.io/advisories/CVE-2025-46728/https://agentprime.io/advisories/CVE-2025-46728/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 May 2025 00:45:25 GMTCVECVE-2023-26130: CRLF injection in yhirose/cpp-httplibhttps://agentprime.io/advisories/CVE-2023-26130/https://agentprime.io/advisories/CVE-2023-26130/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 May 2023 05:00:02 GMTCVE