Vulnerabilities in yhirose
23 resultsCVE-2026-29076MEDIUMcpp-httplib: Stack Overflow Denial of Service (DoS) via std::regex in multipart filename parsingEPSS 0.7%CVE-2025-46728HIGHcpp-httplib has Unbounded Memory Allocation in Chunked/No-Length RequestsEPSS 0.7%CVE-2025-53629HIGHcpp-httplib Unbounded Memory Allocation in Chunked/No-Length Requests VulnerabilityEPSS 0.6%CVE-2025-53628MEDIUMcpp-httplib does not limit the length of a lineEPSS 0.5%CVE-2026-31870HIGHcpp-httplib Affected by Remote Process Crash via Malformed Content-Length Response HeaderEPSS 0.5%CVE-2025-52887HIGHcpp-httplib has unlimited number of http header fields, which causes memory leakEPSS 0.5%CVE-2026-28435HIGHPayload size limit bypass via gzip decompression in ContentReader (streaming) allows oversized request bodies in cpp-httplibEPSS 0.5%CVE-2026-77341MEDIUMcpp-httplib: CRLF injection via unvalidated HTTP trailer headers in chunked response writingEPSS 0.5%CVE-2026-77358HIGHcpp-httplib: Use-after-free of TLS session in WebSocketClient::shutdown_and_close()EPSS 0.4%CVE-2026-102944HIGHcpp-httplib: Cookie header leaked on cross-origin redirectEPSS 0.4%CVE-2026-22776HIGHcpp-httplib vulnerable to a denial of service (DOS) using a zip bombEPSS 0.4%CVE-2026-21428HIGHcpp-httplib has CRLF injection in http headersEPSS 0.4%CVE-2026-103930LOWcpp-httplib open_stream serializes CRLF in request target into HTTP request lineEPSS 0.4%CVE-2026-28434MEDIUMcpp-httplib's default exception handler leaks e.what() to clients via EXCEPTION_WHAT response headerEPSS 0.3%CVE-2025-66570CRITICALcpp-httplib Untrusted HTTP Header Handling: Internal Header Shadowing (REMOTE*/LOCAL*)EPSS 0.3%CVE-2026-45352MEDIUMcpp-httplib DoS: Negative chunk-size in chunked Transfer-EncodingEPSS 0.3%CVE-2026-46527HIGHcpp-httplib: Malicious `X-Forwarded-For` Under Trusted-Proxy Configuration Triggers Empty `vector::front()`, Leading to Undefined Behavior and Server CrashEPSS 0.3%CVE-2026-45372CRITICALcpp-httplib: HTTP header value percent-decoding in server-side `parse_header` enables CRLF injectionEPSS 0.3%CVE-2025-66577MEDIUMcpp-httplib Untrusted HTTP Header Handling: X-Forwarded-For/X-Real-IP TrustEPSS 0.3%CVE-2026-33745HIGHcpp-httplib Client Leaks Authentication Credentials to Untrusted Hosts on Cross-Origin HTTP RedirectEPSS 0.3%