cpp-httplib vulnerabilities
CVEs whose affected-version data names the cpp-httplib package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-103930Low· 3.7cpp-httplib is a C++ header-only HTTP/HTTPS library
cpp-httplib is a C++ header-only HTTP/HTTPS library. From 0.29.0 until 0.51.0, Client::open_stream in httplib.h accepts a caller-controlled path that reaches detail::write_request_line() without the detail::encode_path() protection used …
CVE-2026-102944High· 7.5PoCcpp-httplib is a C++ header-only HTTP/HTTPS library
cpp-httplib is a C++ header-only HTTP/HTTPS library. Prior to 0.51.0, create_redirect_client() removes Host, Proxy-Authorization, and Authorization headers when following a cross-origin 301, 302, 307, or 308 redirect but leaves Cookie he…
CVE-2026-34441Medium· 4.8cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.40.0, cpp-httplib is vulnerable to HTTP Request Smuggling. The server's static file handler serves GET responses without consuming the r…