Filtered by vendor Yhirose Subscriptions
Filtered by product Cpp-httplib Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-26130 2 Cpp-httplib Project, Yhirose 2 Cpp-httplib, Cpp-httplib 2024-11-21 7.5 High
Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is used to set the content-type header in the HTTP .Patch, .Post, .Put and .Delete requests. This can lead to logical errors and other misbehaviors. **Note:** This issue is present due to an incomplete fix for [CVE-2020-11709](https://security.snyk.io/vuln/SNYK-UNMANAGED-YHIROSECPPHTTPLIB-2366507).