CVE-2026-34441

< 0.40.0

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.40.0, cpp-httplib is vulnerab

4.8MEDIUM

CVE-2026-33745

< 0.39.0

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.39.0, the cpp-httplib HTTP client for

7.4HIGH

CVE-2026-32627

< 0.37.2

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.37.2, when a cpp-httplib client is co

8.7HIGH

CVE-2026-31870

< 0.37.1

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.37.1, when a cpp-httplib client uses

7.5HIGH

CVE-2026-29076

< 0.37.0

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.37.0, cpp-httplib uses std::r

5.9MEDIUM

CVE-2026-28435

< 0.35.0

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.35.0, cpp-httplib (httplib.h) does no

7.5HIGH

CVE-2026-28434

< 0.35.0

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.35.0, when a request handler throws a

5.3MEDIUM

CVE-2026-22776

< 0.30.1

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.30.1, a Denial of Service (Do

7.5HIGH

CVE-2026-21428

< 0.30.0

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.30.0, the `write_headers` f

7.5HIGH

CVE-2025-66577

< 0.27.0

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker

5.3MEDIUM

CVE-2025-66570

< 0.27.0

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker

10.0CRITICAL

CVE-2025-53629

< 0.23.0

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.23.0, incoming requests using Transfe

7.5HIGH

CVE-2025-53628

< 0.20.1

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.20.1, cpp-httplib does not have a lim

8.8HIGH

CVE-2025-52887

all versions

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In version 0.21.0, when many http headers fields

7.5HIGH

CVE-2025-46728

< 0.20.1

cpp-httplib is a C++ header-only HTTP/HTTPS server and client library. Prior to version 0.20.1, the library fails to enforce confi

7.5HIGH

CVE-2025-0825

>= 0.17.3 and < 0.18.4

cpp-httplib version v0.17.3 through v0.18.3 fails to filter CRLF characters ("\r\n") when those are prefixed with a null byte. Thi

5.3MEDIUM

CVE-2023-26130

< 0.12.4

Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is used to se

7.5HIGH

CVE-2020-11709

<= 0.5.8

cpp-httplib through 0.5.8 does not filter \r\n in parameters passed into the set_redirect and set_header functions, which creates

7.5HIGH